CVE-2026-73117 - apache juneau
Apache Juneau versions up to 9.2.0 can pass data from a web request straight into response headers or redirect URLs. If an application uses request data for…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 can pass data from a web request straight into response headers or redirect URLs. If an application uses request data for…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73117: Apache Juneau allows header injection and open redirects
Apache Juneau versions up to 9.2.0 can pass data from a web request straight into response headers or redirect URLs.
stackflag.com
November 5, 2026 at 12:50 PM
CVE-2026-73117 - apache juneau
Apache Juneau versions up to 9.2.0 can pass data from a web request straight into response headers or redirect URLs. If an application uses request data for…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 can pass data from a web request straight into response headers or redirect URLs. If an application uses request data for…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73099 - apache juneau
Apache Juneau versions up to 9.2.0 let a specially crafted URL replace the request body, even on GET requests. This means an attacker could cause a user’s browser…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 let a specially crafted URL replace the request body, even on GET requests. This means an attacker could cause a user’s browser…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73099: Apache Juneau allows forged requests via content parameter
Apache Juneau versions up to 9.2.0 let a specially crafted URL replace the request body, even on GET requests.
stackflag.com
November 5, 2026 at 12:30 PM
CVE-2026-73099 - apache juneau
Apache Juneau versions up to 9.2.0 let a specially crafted URL replace the request body, even on GET requests. This means an attacker could cause a user’s browser…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 let a specially crafted URL replace the request body, even on GET requests. This means an attacker could cause a user’s browser…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73116 - apache juneau
The RestClient component in Apache Juneau versions up to 9.2.0 can follow a web redirect and keep authentication information such as passwords or session cookies,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
The RestClient component in Apache Juneau versions up to 9.2.0 can follow a web redirect and keep authentication information such as passwords or session cookies,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73116: Apache Juneau RestClient may send credentials to other sites
The RestClient component in Apache Juneau versions up to 9.2.0 can follow a web redirect and keep authentication information such as passwords or session.
stackflag.com
November 5, 2026 at 12:50 PM
CVE-2026-73116 - apache juneau
The RestClient component in Apache Juneau versions up to 9.2.0 can follow a web redirect and keep authentication information such as passwords or session cookies,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
The RestClient component in Apache Juneau versions up to 9.2.0 can follow a web redirect and keep authentication information such as passwords or session cookies,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-121489 - apache juneau
Apache Juneau versions up to 9.2.0 let a specially crafted request reach files beyond the folder it is supposed to protect. This could let an attacker view, add,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 let a specially crafted request reach files beyond the folder it is supposed to protect. This could let an attacker view, add,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-121489: Apache Juneau allows reading files outside its root directory
Apache Juneau versions up to 9.2.0 let a specially crafted request reach files beyond the folder it is supposed to protect.
stackflag.com
November 5, 2026 at 1:00 PM
CVE-2026-121489 - apache juneau
Apache Juneau versions up to 9.2.0 let a specially crafted request reach files beyond the folder it is supposed to protect. This could let an attacker view, add,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 let a specially crafted request reach files beyond the folder it is supposed to protect. This could let an attacker view, add,…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-96677 - apache juneau
Apache Juneau versions up to 9.2.0 can insert unchecked request data into page headers and footers, letting attackers inject harmful code into web pages. This can…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 can insert unchecked request data into page headers and footers, letting attackers inject harmful code into web pages. This can…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-96677: Apache Juneau may execute malicious scripts from user input
Apache Juneau versions up to 9.2.0 can insert unchecked request data into page headers and footers, letting attackers inject harmful code into web pages.
stackflag.com
November 5, 2026 at 1:00 PM
CVE-2026-96677 - apache juneau
Apache Juneau versions up to 9.2.0 can insert unchecked request data into page headers and footers, letting attackers inject harmful code into web pages. This can…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 can insert unchecked request data into page headers and footers, letting attackers inject harmful code into web pages. This can…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73101 - apache juneau
Apache Juneau versions up to 9.2.0 include the internal exception class and message in the response header and sometimes in the error body whenever an error…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 include the internal exception class and message in the response header and sometimes in the error body whenever an error…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73101: Apache Juneau reveals internal error details to callers
Apache Juneau versions up to 9.2.0 include the internal exception class and message in the response header and sometimes in the error body whenever an.
stackflag.com
November 5, 2026 at 12:40 PM
CVE-2026-73101 - apache juneau
Apache Juneau versions up to 9.2.0 include the internal exception class and message in the response header and sometimes in the error body whenever an error…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 include the internal exception class and message in the response header and sometimes in the error body whenever an error…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73098 - apache juneau
Apache Juneau versions up to 9.2.0 can load and initialize any class named in incoming data, which could trigger unwanted code execution depending on what classes…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 can load and initialize any class named in incoming data, which could trigger unwanted code execution depending on what classes…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73098: Apache Juneau may run attacker-chosen code during data parsing
Apache Juneau versions up to 9.2.0 can load and initialize any class named in incoming data, which could trigger unwanted code execution depending on what.
stackflag.com
November 5, 2026 at 12:30 PM
CVE-2026-73098 - apache juneau
Apache Juneau versions up to 9.2.0 can load and initialize any class named in incoming data, which could trigger unwanted code execution depending on what classes…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
Apache Juneau versions up to 9.2.0 can load and initialize any class named in incoming data, which could trigger unwanted code execution depending on what classes…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73100 - apache juneau
When Apache Juneau encounters a server error, it writes the full request headers—including passwords, cookies and API keys—to its log files without hiding them.…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
When Apache Juneau encounters a server error, it writes the full request headers—including passwords, cookies and API keys—to its log files without hiding them.…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
CVE-2026-73100: Apache Juneau logs authentication headers in clear text on errors
When Apache Juneau encounters a server error, it writes the full request headers—including passwords, cookies and API keys—to its log files without hiding.
stackflag.com
November 5, 2026 at 12:40 PM
CVE-2026-73100 - apache juneau
When Apache Juneau encounters a server error, it writes the full request headers—including passwords, cookies and API keys—to its log files without hiding them.…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec
When Apache Juneau encounters a server error, it writes the full request headers—including passwords, cookies and API keys—to its log files without hiding them.…
Too many irrelevant or confusing CVEs? Use stackflag.com
#apachejuneau #apachefoundation #CVE #infosec