https://wiki.sdmxcloud.org/index.php?action=history&feed=atom&title=Fusion_Registry_10.7.0_OWASP_Analysis 2026-05-05T09:19:01Z Revision history for this page on the wiki MediaWiki 1.32.0 https://wiki.sdmxcloud.org/index.php?title=Fusion_Registry_10.7.0_OWASP_Analysis&diff=7765&oldid=prev 2025-10-06T07:41:34Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #222; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #222; text-align: center;">Revision as of 07:41, 6 October 2025</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>[[Category:<del class="diffchange diffchange-inline">How_To</del>]]</div></td><td class='diff-marker'>+</td><td style="color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>[[Category:<ins class="diffchange diffchange-inline">RetiredFunctionality</ins>]]</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Overview ===</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Overview ===</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> </table>

Vmurrell https://wiki.sdmxcloud.org/index.php?title=Fusion_Registry_10.7.0_OWASP_Analysis&diff=5991&oldid=prev 2023-09-10T16:41:37Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #222; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #222; text-align: center;">Revision as of 16:41, 10 September 2023</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Category:How_To]]</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Overview ===</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Overview ===</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> </table>

Vmurrell https://wiki.sdmxcloud.org/index.php?title=Fusion_Registry_10.7.0_OWASP_Analysis&diff=3683&oldid=prev 2021-05-24T09:37:34Z

<p>‎<span dir="auto"><span class="autocomment">Overview of Report</span></span></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #222; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #222; text-align: center;">Revision as of 09:37, 24 May 2021</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l19" >Line 19:</td> <td colspan="2" class="diff-lineno">Line 19:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>''Action:'' Since the Data Browser is now deprecated and will not ship with Fusion Registry 11, no action will be taken.</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>''Action:'' Since the Data Browser is now deprecated and will not ship with Fusion Registry 11, no action will be taken.</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== 2. jquery.min.js - version 3.3.0 - bundled with the Data Browser ====</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #222; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== 2. jquery.min.js - version 3.3.0 - bundled with the Data Browser ====</div></td></tr> </table>

Plazarou https://wiki.sdmxcloud.org/index.php?title=Fusion_Registry_10.7.0_OWASP_Analysis&diff=3682&oldid=prev 2021-05-24T09:37:17Z

<p>Created page with &quot;=== Overview === The following details the OWASP analysis of Fusion Registry Enterprise Edition version &#039;&#039;&#039;10.7.0&#039;&#039;&#039; === Environment === The OWASP command-line client was ru...&quot;</p> <p><b>New page</b></p><div>=== Overview ===<br /> <br /> The following details the OWASP analysis of Fusion Registry Enterprise Edition version '''10.7.0'''<br /> <br /> === Environment ===<br /> The OWASP command-line client was run against the Fusion Registry version 10.7.0<br /> <br /> * OWASP Cli version: dependency-check version: 6.1.6<br /> * Java version &quot;1.8.0_172&quot;<br /> * Operating System: Windows 10.0.19042.928<br /> * Date performed: 10th May 2021<br /> <br /> ===Overview of Report===<br /> The report revealed 5 vulnerable dependencies:<br /> <br /> ==== 1. bootstrap.bundle.min.js - version 4.0.0 - bundled with the Data Browser ====<br /> <br /> ''Issue:'' This is a cross-site scripting issue rated as severity &quot;MEDIUM&quot;.<br /> <br /> ''Action:'' Since the Data Browser is now deprecated and will not ship with Fusion Registry 11, no action will be taken.<br /> <br /> <br /> ==== 2. jquery.min.js - version 3.3.0 - bundled with the Data Browser ====<br /> <br /> ''Issue:'' mishandling of jQuery.extend could allow unsanitized source objects to extend the native Object.prototype, rated as severity &quot;MEDIUM&quot;.<br /> <br /> ''Action:'' Since the Data Browser is now deprecated and will not ship with Fusion Registry 11, no action will be taken.<br /> <br /> ==== 3. bootstrap.min.js - version 3.3.5 ====<br /> <br /> ''Issue:'' This is a cross-site scripting issue rated as severity &quot;MEDIUM&quot;. <br /> <br /> ''Action:'' Bootstrap is a fundamental part of the User Interface of Fusion Registry. The newest releases (versions 4 and 5) require major changes to almost all pages within Fusion Registry. At the minute this is far too much of an undertaking, so Bootstrap has not been updated. At some point in the future the Fusion Registry User Interface will be updated, and this vulnerability will be addressed then.<br /> <br /> ==== 4. commons-io version 2.6 ====<br /> <br /> ''Issue:'' Vulnerability within the method FileNameUtils.normalize severity &quot;MEDIUM&quot;. <br /> <br /> ''Action:'' The Fusion Registry does not use this method in the commons-io framework.<br /> <br /> ==== 5. spring-rabbit - version 2.3.6 ====<br /> <br /> ''Issue:'' RabbitMQ before 3.4.0 allows remote attackers to bypass the loopback_users restriction via a crafted X-Forwareded-For header, rated as severity &quot;MEDIUM&quot;. <br /> <br /> ''Action:'' This is the latest version of the RabbitMQ library produced by Spring. Until a new release is available, this is the version supplied with Fusion Registry. We shall keep watch of when Spring make a newer package available. When the issue is addressed, we shall release a future release of the Registry with the updated dependency.<br /> <br /> ===Attached Report===<br /> <br /> A PDF of the OWASP dependency report can be obtained [[:File:FREE-10.7.0-Dependency-Check_Report.pdf | here ]].</div>

Plazarou