API - API Security Blog

Debian: Security Advisory (DSA-5755-1)

The remote host is missing an update for the...Read More ...

August 22, 2024

Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2287)

The remote host is missing an update for the Huawei...Read More ...

August 22, 2024

Debian: Security Advisory (DSA-5754-1)

The remote host is missing an update for the...Read More ...

August 22, 2024

Debian: Security Advisory (DSA-5756-1)

The remote host is missing an update for the...Read More ...

August 22, 2024

The Facts About Continuous Penetration Testing and Why It’s Important

What is Continuous Attack Surface Penetration Testing or CASPT? Continuous Penetration Testing or Continuous Attack Surface Penetration Testing (CASPT) is an advanced security practice that involves t ...

August 22, 2024

Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management

Summary Multiple vulnerabilities were addressed in IBM Application Performance Management 8.1.4.0 IF16 patch Vulnerability Details ** CVEID: CVE-2023-32342 DESCRIPTION: **IBM GSKit could allow a remo ...

August 22, 2024

CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover

Affected Packages The issue impacts only editor instances with enabled version notifications. Please note that this feature is disabled by default in all CKEditor 4 LTS versions. Therefore, if you use ...

August 22, 2024

CVE-2024-42411 User creation date manipulation in POST /api/v4/users

Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to restrict the input in POST /api/v4/users which allows a user to manipulate the ...

August 22, 2024