https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:40:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349240 EUVD-2026-349240 https://cve.radiocsirt.org/vuln/euvd-2026-349240 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50629 <p>The &#39;clientId&#39; parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server&#39;s log files. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.</p> <p>The &#39;clientId&#39; parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server&#39;s log files. Users are recommended to upgrade to versions 4.2.2 or 4.1.7 or 3.6.12, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-50629 https://cve.radiocsirt.org/vuln/ghsa-f8p7-h97q-7vx7 <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-rs-security-oauth2</p> <p>The &#39;clientId&#39; parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server&#39;s log files. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.cxf:cxf-rt-rs-security-oauth2</p> <p>The &#39;clientId&#39; parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without sanitizing control characters. This allows an attacker to inject arbitrary content, including fake log entries, into the server&#39;s log files. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-f8p7-h97q-7vx7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1895 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen, XML-External-Entity-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um Sicherheitsvorkehrungen zu umgehen, XML-External-Entity-Angriffe durchzuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1895