Red Hat 3scale Amp CVEs and Security Vulnerabilities

Vulnerabilities (Red Hat 3scale Amp)

CVE-2023-5349

Draw while calling getdrawinfo()

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by memory exhaustion.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Redhat Rmagick

Products

Fedora Red Hat 3scale Amp Rmagick

CVE-2023-0456

Apicast proxies the api call with incorrect jwt token to the api backend without proper authorization check

A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to be accessible to an attacker, permitting access to unauthorized information.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Apicast Red Hat 3scale Amp

Search vulnerabilities

Draw while calling getdrawinfo()

Apicast proxies the api call with incorrect jwt token to the api backend without proper authorization check