https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:46:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-337129 EUVD-2026-337129 https://cve.radiocsirt.org/vuln/euvd-2026-337129 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23685 <p>Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.</p> <p>Hard-coded credentials in mod-remote-storage versions under 1.7.2 and from 2.0.0 to 2.0.3 allows unauthorized users to gain read access to mod-inventory-storage records including instances, holdings, items, contributor-types, and identifier-types.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23685 https://cve.radiocsirt.org/vuln/ghsa-m8v7-469p-5x89 <p><strong>Affected:</strong> Maven: org.folio:mod-remote-storage</p> <p>### Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, allowing unauthorized read access to these mod-inventory-storage records: instances, holdings, items, contributor-types, identifier-types. This includes records marked as suppressed from discovery.</p> <p>### Patches Upgrade mod-remote-storage to &gt;=2.0.3, or a 1.7.x version &gt;=1.7.1.</p> <p>### Workarounds No known workarounds.</p> <p>### References https://wiki.folio.org/x/hbMMBw - FOLIO Security Advisory with Upgrade Instructions https://github.com/folio-org/mod-remote-storage/commit/57df495f76e9aa5be9ce7ce3a65f89b6dbcbc13b - Fix</p> <p><strong>Affected:</strong> Maven: org.folio:mod-remote-storage</p> <p>### Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, allowing unauthorized read access to these mod-inventory-storage records: instances, holdings, items, contributor-types, identifier-types. This includes records marked as suppressed from discovery.</p> <p>### Patches Upgrade mod-remote-storage to &gt;=2.0.3, or a 1.7.x version &gt;=1.7.1.</p> <p>### Workarounds No known workarounds.</p> <p>### References https://wiki.folio.org/x/hbMMBw - FOLIO Security Advisory with Upgrade Instructions https://github.com/folio-org/mod-remote-storage/commit/57df495f76e9aa5be9ce7ce3a65f89b6dbcbc13b - Fix</p> https://cve.radiocsirt.org/vuln/ghsa-m8v7-469p-5x89 https://cve.radiocsirt.org/vuln/gsd-2024-23685 gsd-2024-23685 https://cve.radiocsirt.org/vuln/gsd-2024-23685