Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 12:04:36 +0000 certa-2011-avi-671 — Deux vulnérabilités de JBoss permettent respectivement de l'injection de code indirecte à distance et de l'injection de… https://cve.radiocsirt.org/vuln/certa-2011-avi-671 certa-2011-avi-671 https://cve.radiocsirt.org/vuln/certa-2011-avi-671 EUVD-2026-116401 https://cve.radiocsirt.org/vuln/euvd-2026-116401 EUVD-2026-116401 https://cve.radiocsirt.org/vuln/euvd-2026-116401 fkie_cve-2011-3609 https://cve.radiocsirt.org/vuln/fkie_cve-2011-3609 <p>A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the &#34;Access-Control-Allow-Origin&#34; HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker.</p> <p>A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the &#34;Access-Control-Allow-Origin&#34; HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-3609 GHSA-66h8-2pwv-w4h6 https://cve.radiocsirt.org/vuln/ghsa-66h8-2pwv-w4h6 <p>A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the &#34;Access-Control-Allow-Origin&#34; HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker.</p> <p>A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the &#34;Access-Control-Allow-Origin&#34; HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-66h8-2pwv-w4h6 gsd-2011-3609 https://cve.radiocsirt.org/vuln/gsd-2011-3609 gsd-2011-3609 https://cve.radiocsirt.org/vuln/gsd-2011-3609