https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:55:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-05129 cnvd-2021-05129 https://cve.radiocsirt.org/vuln/cnvd-2021-05129 https://cve.radiocsirt.org/vuln/euvd-2026-22062 EUVD-2026-22062 https://cve.radiocsirt.org/vuln/euvd-2026-22062 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21242 <p>OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the `Attachment-Support` header. This Servlet does not enforce any authentication or authorization checks. This issue may lead to pre-auth remote code execution. This issue was fixed in 4.0.3 by removing AttachmentUploadServlet and not using deserialization</p> <p>OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the `Attachment-Support` header. This Servlet does not enforce any authentication or authorization checks. This issue may lead to pre-auth remote code execution. This issue was fixed in 4.0.3 by removing AttachmentUploadServlet and not using deserialization</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21242 https://cve.radiocsirt.org/vuln/gsd-2021-21242 gsd-2021-21242 https://cve.radiocsirt.org/vuln/gsd-2021-21242