RHSA-2023:2041: Important: Migration Toolkit for Applications security and bug fix update
Migration Toolkit for Applications 6.1.0 ImagesSecurity Fix(es): keycloak: path traversal via double URL encoding (CVE-2022-3782) spring-security-oauth2-client: Privilege Escalation in spring-security-oauth2-client (CVE-2022-31690) xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow (CVE-2022-41966) Apache CXF: SSRF Vulnerability (CVE-2022-46364) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:2041?
The severity of RHSA-2023:2041 varies based on the specific vulnerabilities it addresses, including critical and high-severity vulnerabilities.
How do I fix RHSA-2023:2041?
To fix RHSA-2023:2041, apply the recommended updates provided in the advisory for the affected applications.
What vulnerabilities are addressed in RHSA-2023:2041?
RHSA-2023:2041 addresses path traversal and privilege escalation vulnerabilities among others.
Which applications are affected by RHSA-2023:2041?
Applications affected by RHSA-2023:2041 include Migration Toolkit for Applications, Keycloak, and Spring Security OAuth2 Client.
Is there a workaround for RHSA-2023:2041?
There are no specific workarounds recommended for RHSA-2023:2041 other than applying the security updates.