Threats Tagged 'cve-2025-66516'

Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. This CVE covers the same vulnerability as in CVE-2025-54988. However, this CVE expands the scope of affected packages in two ways. First, while the entrypoint for the vulnerability was the tika-parser-pdf-module as reported in CVE-2025-54988, the vulnerability and its fix were in tika-core. Users who upgraded the tika-parser-pdf-module but did not upgrade tika-core to >= 3.2.2 would still be vulnerable. Second, the original report failed to mention that in the 1.x Tika releases, the PDFParser was in the "org.apache.tika:tika-parsers" module.

HighVulnerabilityUnited StatesGermanyUnited Kingdom+9#cve#cve-2025-66516#cwe-611

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * mosquitto: sending specific sequences of packets may trigger memory leak (CVE-2024-8376) * micromatch: vulnerable to Regular Expression Denial of Service (CVE-2024-4067) urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) * node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863) * python-django: Potential denial-of-service in django.utils.html.urlize() (CVE-2024-38875) * python-django: Username enumeration through timing difference for users with unusable passwords (CVE-2024-39329) * python-django: Potential directory-traversal in django.core.files.storage.Storage.save() (CVE-2024-39330) * python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant() (CVE-2024-39614) * github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp (CVE-2024-5569) * puppet-foreman: An authentication bypass vulnerability exists in Foreman (CVE-2024-7012) * python-django: Potential SQL injection in QuerySet.values() and values_list() (CVE-2024-42005) * grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend (CVE-2024-7246) * puppet-pulpcore: An authentication bypass vulnerability exists in pulpcore (CVE-2024-7923) * foreman: Read-only access to entire DB from templates (CVE-2024-8553) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * mosquitto: sending specific sequences of packets may trigger memory leak (CVE-2024-8376) * micromatch: vulnerable to Regular Expression Denial of Service (CVE-2024-4067) urllib3: proxy-authorization request header is not stripped during cross-origin redirects (CVE-2024-37891) * node-tar: denial of service while parsing a tar file due to lack of folders depth validation (CVE-2024-28863) * python-django: Potential denial-of-service in django.utils.html.urlize() (CVE-2024-38875) * python-django: Username enumeration through timing difference for users with unusable passwords (CVE-2024-39329) * python-django: Potential directory-traversal in django.core.files.storage.Storage.save() (CVE-2024-39330) * python-django: Potential denial-of-service in django.utils.translation.get_supported_language_variant() (CVE-2024-39614) * github.com/jaraco/zipp: Denial of Service (infinite loop) via crafted zip file in jaraco/zipp (CVE-2024-5569) * puppet-foreman: An authentication bypass vulnerability exists in Foreman (CVE-2024-7012) * python-django: Potential SQL injection in QuerySet.values() and values_list() (CVE-2024-42005) * grpc: client communicating with a HTTP/2 proxy can poison the HPACK table between the proxy and the backend (CVE-2024-7246) * puppet-pulpcore: An authentication bypass vulnerability exists in pulpcore (CVE-2024-7923) * foreman: Read-only access to entire DB from templates (CVE-2024-8553) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.