Threats Tagged 'ghsa-5w4f-vwv7-mj4c'

1 threat

Threats Tagged 'ghsa-5w4f-vwv7-mj4c'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.7%	CVE-2026-41871Apache Nutch · Missing Authorization Critical9.8EPSS 0.7%2026-09-09CVE Database V5CVE-2026-41871 CVE-2026-41871 is a critical vulnerability in Apache Nutch Server's REST API affecting versions 1.10 through 1.22. It involves missing authorization and unsafe reflection, allowing unauthorized access and potentially full compromise. The vulnerability is fixed by upgrading to version 1.23, which removes the vulnerable Nutch Server component. If upgrading is not feasible, restricting access to trusted users is recommended. EPSS 0.7%Vulnerability Apache Software Foundation #cwe-862 #cwe-470 #ghsa-5w4f-vwv7-mj4c	CVE Database V5	2026-09-09

Showing 1–1 of 1 result