Red Hat Codeready Studio vulnerabilities

5 CVEs affecting Red Hat Codeready Studio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-1932, published 2024-11-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-4104, published 2021-12-14. High severity, CVSS 7.5. EPSS: 80.6% chance of exploitation in the next 30 days. JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and…
CVE-2020-10714, published 2020-09-23. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack.…
CVE-2021-20218, published 2021-03-16. High severity, CVSS 7.4. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to…
CVE-2021-3642, published 2021-08-05. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest…
CVE-2023-1932, published 2024-11-07. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in…