New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Update bundled resources/INSPIRE presets used in hale studio #52

Closed

emanuelaepure10 wants to merge 1 commit into halestudio:master from emanuelaepure10:feat/ING-3236

Closed

feat: Update bundled resources/INSPIRE presets used in hale studio

Annotations

10 errors

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

XXE injection vulnerability

h2: Remote Code Execution in Console

Loading of custom classes from remote servers through JNDI

OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

XStream: remote code execution due to insecure XML deserialization

XStream: SSRF via crafted input stream

XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet

XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry