Skip to content
OpenAdvisories

Vendor

FIWARE

5 known vulnerabilities.

Products

FIWARE Keyrock 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-42167

    Command Injection in Organisationname

    The function "generate_app_certificates" in controllers/saml2/saml2.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands …

    FIWARE FIWARE Keyrock
  • Critical 9.1
    CVE-2024-42166

    Command Injection in Applicationname

    The function "generate_app_certificates" in lib/app_certificates.js of FIWARE Keyrock <= 8.4 does not neutralize special elements used in an OS Command properly. This allows an authenticated user with permissions to create applications to execute commands by …

    FIWARE FIWARE Keyrock