Redhat

3scale Api Management

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2021-20252

  • EPSS 0.34%
  • Published 23.02.2021 23:15:13
  • Last modified 21.11.2024 05:46:12

A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain queries allowing a malicious authenticated user to submit a request with a sufficiently lar...

7.8

CVE-2019-10216

  • EPSS 0.53%
  • Published 27.11.2019 13:15:10
  • Last modified 21.11.2024 04:18:40

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that coul...