https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:05:59.605715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-91280 cnvd-2021-91280 2026-10-12T21:05:59.610249+00:00 cnvd-2021-91280 https://cve.radiocsirt.org/vuln/euvd-2026-30543 EUVD-2026-30543 2026-10-12T21:05:59.610294+00:00 EUVD-2026-30543 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39235 fkie_cve-2021-39235 2026-10-12T21:05:59.610309+00:00

In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.

 https://cve.radiocsirt.org/vuln/ghsa-c6j7-4fr9-c76p GHSA-c6j7-4fr9-c76p — Incorrect permissions in Apache Ozone 2026-10-12T21:05:59.610339+00:00

Affected: Maven: org.apache.ozone:ozone-main

In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.

 https://cve.radiocsirt.org/vuln/gsd-2021-39235 gsd-2021-39235 2026-10-12T21:05:59.610362+00:00 gsd-2021-39235