Objectcomputing

Micronaut

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-33013

Exploit
  • EPSS 0.19%
  • Veröffentlicht 20.03.2026 04:47:42
  • Zuletzt bearbeitet 24.03.2026 21:21:26

Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions prior to both 4.10.16 and 3.10.5 do not correctly handle descending array index order during form-urlencoded body b...

7.5

CVE-2026-33012

  • EPSS 0.16%
  • Veröffentlicht 20.03.2026 04:43:07
  • Zuletzt bearbeitet 24.03.2026 21:21:44

Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications. Versions 4.7.0 through 4.10.16 used an unbounded ConcurrentHashMap cache with no eviction policy in its DefaultHtmlErrorRes...

7.8

CVE-2024-23639

  • EPSS 0.04%
  • Veröffentlicht 09.02.2024 01:15:09
  • Zuletzt bearbeitet 21.11.2024 08:58:03

Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM applications with support for Java, Kotlin and the Groovy language. Enabled but unsecured management endpoints are susceptible to...

5.3

CVE-2022-21700

  • EPSS 0.32%
  • Veröffentlicht 18.01.2022 23:15:08
  • Zuletzt bearbeitet 21.11.2024 06:45:15

Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy language. In affected versions sending an invalid Content Type header leads to memory leak in DefaultArgumentC...

7.5

CVE-2021-32769

Exploit
  • EPSS 0.44%
  • Veröffentlicht 16.07.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 06:07:42

Micronaut is a JVM-based, full stack Java framework designed for building JVM applications. A path traversal vulnerability exists in versions prior to 2.5.9. With a basic configuration, it is possible to access any file from a filesystem, using "/../...

9.8

CVE-2020-7611

Exploit
  • EPSS 0.5%
  • Veröffentlicht 30.03.2020 22:15:15
  • Zuletzt bearbeitet 21.11.2024 05:37:28

All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed to the client.