pomerium_signature is not verified in middleware in github.com/pomerium/pomerium

Mô tả

Tham khảo

• pomerium/pomerium security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-29652 · ADVISORY
• pomerium/pomerium#2048 · WEB

Lỗ hổng khác của github.com/pomerium/pomerium

• CVE-2026-50285CAO 7.5Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs zstd decompression …
• CVE-2024-47616TRUNG BÌNH 6.8Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium …
• CVE-2024-39315TRUNG BÌNH 6.5Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (at `/.pomerium`) unintentional…
• CVE-2023-33189NGHIÊM TRỌNG 9.8Pomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Po…
• CVE-2022-24797NGHIÊM TRỌNG 9.1Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus …