Apache Software Foundation Apache Cocoon güvenlik açıkları (CVE)

Apache Software Foundation Apache Cocoon için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç
7.5Yüksek
CVE-2026-108089

Apache Cocoon: Unauthenticated access to diagnostic interfaces

Apache Software Foundation Apache Cocoon

** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, exposure of (verbose)…

7.5Yüksek
CVE-2026-108088

Apache Cocoon: Cross-user cache poisoning

Apache Software Foundation Apache Cocoon

** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for one user could be used when serving content for other users. This issue affect…

8.8Yüksek
CVE-2026-108087

Apache Cocoon: SQL Injection

Apache Software Foundation Apache Cocoon

** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injec…

7.5Yüksek
CVE-2026-108086

Apache Cocoon: XEE could lead to SSRF and information disclosure

Apache Software Foundation Apache Cocoon

** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including…

7.5Yüksek
CVE-2025-24783

Apache Cocoon: continuations may not be private

Apache Software Foundation Apache Cocoon

** UNSUPPORTED WHEN ASSIGNED ** Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random…