Apache Submarine vulnerabilities

2 known vulnerabilities in Apache Submarine from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Submarine: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-37924Nov 22, 2023ApacheEPSS 7.17%

  Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login. Now we have fixed this issue and now user must have the correct login to access workbench. This issue affects Apach

• 9.8 Critical severity

  Apache Submarine: Deserialization of Untrusted Data

  CVE-2023-46302Nov 20, 2023ApacheEPSS 1.75%

  Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 . Apache Submarine uses JAXRS to define REST endpoints. In order to handle YAML requests (using a