https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 20:55:22 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-08035 cnvd-2022-08035 https://cve.radiocsirt.org/vuln/cnvd-2022-08035 https://cve.radiocsirt.org/vuln/euvd-2026-32115 EUVD-2026-32115 https://cve.radiocsirt.org/vuln/euvd-2026-32115 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42357 <p>When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.</p> <p>When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42357 https://cve.radiocsirt.org/vuln/ghsa-vv38-4xcj-q4rw <p><strong>Affected:</strong> Maven: org.apache.knox:gateway-service-knoxsso</p> <p>When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.</p> <p><strong>Affected:</strong> Maven: org.apache.knox:gateway-service-knoxsso</p> <p>When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by an attacker. This URL would need to be presented to the user outside the normal request flow through a XSS or phishing campaign.</p> https://cve.radiocsirt.org/vuln/ghsa-vv38-4xcj-q4rw https://cve.radiocsirt.org/vuln/gsd-2021-42357 gsd-2021-42357 https://cve.radiocsirt.org/vuln/gsd-2021-42357