2025-34 Java Security Weekly News - GitHub
2025 » Published on September 5, 2025
 | Github Security Advisories |
| [GHSA-hq8m-v68g-8cf8] Opencast has a partial path traversal vulnerability in UI config org.opencastproject:opencast-user-interface-configuration - impacts versions: < 17.7 fixed in: 17.7 org.opencastproject:opencast-user-interface-configuration - impacts versions: = 18.0 fixed in: 18.1 [GHSA-w48j-pp7j-fj55] Valtimo scripting engine can be used to gain access to sensitive data or resources com.ritense.valtimo:core - impacts versions: < 12.16.0.RELEASE fixed in: 12.16.0.RELEASE com.ritense.valtimo:core - impacts versions: >= 13.0.0.RELEASE, < 13.1.2.RELEASE fixed in: 13.1.2.RELEASE [GHSA-9m7c-m33f-3429] XWiki PDF export jobs store sensitive cookies unencrypted in job statuses org.xwiki.platform:xwiki-platform-export-pdf-api - impacts versions: >= 14.4.2, < 16.4.8 fixed in: 16.4.8 org.xwiki.platform:xwiki-platform-export-pdf-api - impacts versions: >= 16.5.0-rc-1, < 16.10.7 fixed in: 16.10.7 org.xwiki.platform:xwiki-platform-export-pdf-api - impacts versions: >= 17.0.0-rc-1, < 17.4.0-rc-1 fixed in: 17.4.0-rc-1 |