Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-fh34-c629-p8xj
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra has sensitive Information Leak in cqlsh 07 Apr
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-qffm-gf3j-6mvg
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra has an authenticated DoS over CQL 07 Apr
  • Fix available
  • Severity - 2.3 (Low)
GHSA-qxpc-96fq-wwmg
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator 07 Apr
  • Fix available
  • Severity - 8.8 (High)
GHSA-5c4f-pxmx-xcm4
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) 25 Aug 2025
  • Fix available
  • Severity - 8.8 (High)
GHSA-3cjf-fwcq-xh22
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions 04 Feb 2025
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-rgfx-7p65-3ff4
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra: unrestricted deserialization of JMX authentication credentials 04 Feb 2025
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-wmcc-9vch-jmx4
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions 04 Feb 2025
  • Fix available
  • Severity - 8.8 (High)
GHSA-m9p2-j4hg-g373
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra: Privilege escalation when enabling FQL/Audit logs 06 Jul 2023
  • Fix available
  • Severity - 7.8 (High)
GHSA-52gq-7j6c-xw6x
  • Maven/org.apache.cassandra:cassandra-all
 Missing Authentication for Critical Function in Apache Cassandra 13 May 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-8ffc-79xg-29w8
  • Maven/org.apache.cassandra:cassandra-all
 Apache Cassandra vulnerable to Code Injection due to unsafe configuration 12 Feb 2022
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-2vxm-vp4c-fjfw
  • Maven/org.apache.cassandra:cassandra-all
 Authentication Bypass in Apache Cassandra 09 Feb 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-24ww-mc5x-xc43
  • Maven/org.apache.cassandra:cassandra-all
 Man-in-the-middle attack in Apache Cassandra 07 May 2021
  • Fix available
  • Severity - 5.9 (Medium)