{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-13503.json" } ], "title": "antlr: ANTLR4: antlr ANTLR4: Path traversal via manipulation of getImportedVocabFile function", "tracking": { "current_release_date": "2026-06-30T06:23:31+00:00", "generator": { "date": "2026-06-30T06:23:31+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.0" } }, "id": "CVE-2026-13503", "initial_release_date": "2026-06-28T15:15:07.671000+00:00", "revision_history": [ { "date": "2026-06-28T15:15:07.671000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-06-30T06:18:06+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-06-30T06:23:31+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 10", "product": { "name": "Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6", "product": { "name": "Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 7", "product": { "name": "Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 8", "product": { "name": "Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 9", "product": { "name": "Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "category": "product_version", "name": "antlr-tool", "product": { "name": "antlr-tool", "product_id": "antlr-tool", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-tool" } } }, { "category": "product_version", "name": "antlr-javadoc", "product": { "name": "antlr-javadoc", "product_id": "antlr-javadoc", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-javadoc" } } }, { "category": "product_version", "name": "antlr-C++", "product": { "name": "antlr-C++", "product_id": "antlr-C++", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-C%2B%2B" } } }, { "category": "product_version", "name": "antlr-manual", "product": { "name": "antlr-manual", "product_id": "antlr-manual", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-manual" } } }, { "category": "product_version", "name": "antlr.src", "product": { "name": "antlr.src", "product_id": "antlr.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr?arch=src" } } }, { "category": "product_version", "name": "antlr-C++-doc", "product": { "name": "antlr-C++-doc", "product_id": "antlr-C++-doc", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-C%2B%2B-doc" } } }, { "category": "product_version", "name": "antlr-python", "product": { "name": "antlr-python", "product_id": "antlr-python", "product_identification_helper": { "purl": "pkg:rpm/redhat/antlr-python" } } }, { "category": "product_version", "name": "grafana-prometheus", "product": { "name": "grafana-prometheus", "product_id": "grafana-prometheus", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-prometheus" } } }, { "category": "product_version", "name": "grafana-postgres", "product": { "name": "grafana-postgres", "product_id": "grafana-postgres", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-postgres" } } }, { "category": "product_version", "name": "grafana-selinux", "product": { "name": "grafana-selinux", "product_id": "grafana-selinux", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-selinux" } } }, { "category": "product_version", "name": "grafana.src", "product": { "name": "grafana.src", "product_id": "grafana.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana?arch=src" } } }, { "category": "product_version", "name": "grafana-mssql", "product": { "name": "grafana-mssql", "product_id": "grafana-mssql", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-mssql" } } }, { "category": "product_version", "name": "grafana-graphite", "product": { "name": "grafana-graphite", "product_id": "grafana-graphite", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-graphite" } } }, { "category": "product_version", "name": "grafana-cloudwatch", "product": { "name": "grafana-cloudwatch", "product_id": "grafana-cloudwatch", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-cloudwatch" } } }, { "category": "product_version", "name": "grafana-stackdriver", "product": { "name": "grafana-stackdriver", "product_id": "grafana-stackdriver", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-stackdriver" } } }, { "category": "product_version", "name": "grafana-opentsdb", "product": { "name": "grafana-opentsdb", "product_id": "grafana-opentsdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-opentsdb" } } }, { "category": "product_version", "name": "grafana-influxdb", "product": { "name": "grafana-influxdb", "product_id": "grafana-influxdb", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-influxdb" } } }, { "category": "product_version", "name": "grafana-mysql", "product": { "name": "grafana-mysql", "product_id": "grafana-mysql", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-mysql" } } }, { "category": "product_version", "name": "grafana-elasticsearch", "product": { "name": "grafana-elasticsearch", "product_id": "grafana-elasticsearch", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-elasticsearch" } } }, { "category": "product_version", "name": "grafana", "product": { "name": "grafana", "product_id": "grafana", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana" } } }, { "category": "product_version", "name": "grafana-loki", "product": { "name": "grafana-loki", "product_id": "grafana-loki", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-loki" } } }, { "category": "product_version", "name": "grafana-azure-monitor", "product": { "name": "grafana-azure-monitor", "product_id": "grafana-azure-monitor", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana-azure-monitor" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "antlr-C++ as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:antlr-C++" }, "product_reference": "antlr-C++", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-javadoc as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:antlr-javadoc" }, "product_reference": "antlr-javadoc", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-manual as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:antlr-manual" }, "product_reference": "antlr-manual", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-tool as a component of Red Hat Enterprise Linux 10", "product_id": "red_hat_enterprise_linux_10:antlr-tool" }, "product_reference": "antlr-tool", "relates_to_product_reference": "red_hat_enterprise_linux_10" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-javadoc as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:antlr-javadoc" }, "product_reference": "antlr-javadoc", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-manual as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:antlr-manual" }, "product_reference": "antlr-manual", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "antlr.src as a component of Red Hat Enterprise Linux 6", "product_id": "red_hat_enterprise_linux_6:antlr.src" }, "product_reference": "antlr.src", "relates_to_product_reference": "red_hat_enterprise_linux_6" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-C++ as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:antlr-C++" }, "product_reference": "antlr-C++", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-C++-doc as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:antlr-C++-doc" }, "product_reference": "antlr-C++-doc", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-javadoc as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:antlr-javadoc" }, "product_reference": "antlr-javadoc", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-manual as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:antlr-manual" }, "product_reference": "antlr-manual", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-python as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:antlr-python" }, "product_reference": "antlr-python", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-tool as a component of Red Hat Enterprise Linux 7", "product_id": "red_hat_enterprise_linux_7:antlr-tool" }, "product_reference": "antlr-tool", "relates_to_product_reference": "red_hat_enterprise_linux_7" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-C++ as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:antlr-C++" }, "product_reference": "antlr-C++", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-javadoc as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:antlr-javadoc" }, "product_reference": "antlr-javadoc", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-manual as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:antlr-manual" }, "product_reference": "antlr-manual", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-tool as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:antlr-tool" }, "product_reference": "antlr-tool", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "antlr.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:antlr.src" }, "product_reference": "antlr.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana" }, "product_reference": "grafana", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-azure-monitor as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-azure-monitor" }, "product_reference": "grafana-azure-monitor", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-cloudwatch as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-cloudwatch" }, "product_reference": "grafana-cloudwatch", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-elasticsearch as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-elasticsearch" }, "product_reference": "grafana-elasticsearch", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-graphite as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-graphite" }, "product_reference": "grafana-graphite", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-influxdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-influxdb" }, "product_reference": "grafana-influxdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-loki as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-loki" }, "product_reference": "grafana-loki", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-mssql as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-mssql" }, "product_reference": "grafana-mssql", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-mysql as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-mysql" }, "product_reference": "grafana-mysql", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-opentsdb as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-opentsdb" }, "product_reference": "grafana-opentsdb", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-postgres as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-postgres" }, "product_reference": "grafana-postgres", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-prometheus as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-prometheus" }, "product_reference": "grafana-prometheus", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-selinux as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-selinux" }, "product_reference": "grafana-selinux", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana-stackdriver as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana-stackdriver" }, "product_reference": "grafana-stackdriver", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "grafana.src as a component of Red Hat Enterprise Linux 8", "product_id": "red_hat_enterprise_linux_8:grafana.src" }, "product_reference": "grafana.src", "relates_to_product_reference": "red_hat_enterprise_linux_8" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-C++ as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:antlr-C++" }, "product_reference": "antlr-C++", "relates_to_product_reference": "red_hat_enterprise_linux_9" }, { "category": "default_component_of", "full_product_name": { "name": "antlr-tool as a component of Red Hat Enterprise Linux 9", "product_id": "red_hat_enterprise_linux_9:antlr-tool" }, "product_reference": "antlr-tool", "relates_to_product_reference": "red_hat_enterprise_linux_9" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-13503", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "discovery_date": "2026-06-28T16:01:17.123221+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2493994" } ], "notes": [ { "category": "description", "text": "A flaw was found in antlr ANTLR4. A remote attacker can exploit a path traversal vulnerability by manipulating the `getImportedVocabFile` function within the `tokenVocab Grammar Option Handler` component. This could allow unauthorized access to sensitive files and directories on the system.", "title": "Vulnerability description" }, { "category": "summary", "text": "antlr: ANTLR4: antlr ANTLR4: Path traversal via manipulation of getImportedVocabFile function", "title": "Vulnerability summary" }, { "category": "other", "text": "Successful exploitation requires a specific scenario where an application using ANTLR4 is configured to accept and parse untrusted, attacker-supplied grammar files containing a manipulated tokenVocab option.\n\nImpact Limitations: The vulnerability is strictly limited to information disclosure via path traversal. While a remote attacker can read sensitive files that the application has permissions to access, this flaw does not inherently allow for remote code execution (RCE), data corruption, or privilege escalation on the host system.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_enterprise_linux_10:antlr-C++", "red_hat_enterprise_linux_10:antlr-javadoc", "red_hat_enterprise_linux_10:antlr-manual", "red_hat_enterprise_linux_10:antlr-tool", "red_hat_enterprise_linux_6:antlr-javadoc", "red_hat_enterprise_linux_6:antlr-manual", "red_hat_enterprise_linux_6:antlr.src", "red_hat_enterprise_linux_7:antlr-C++", "red_hat_enterprise_linux_7:antlr-C++-doc", "red_hat_enterprise_linux_7:antlr-javadoc", "red_hat_enterprise_linux_7:antlr-manual", "red_hat_enterprise_linux_7:antlr-python", "red_hat_enterprise_linux_7:antlr-tool", "red_hat_enterprise_linux_8:antlr-C++", "red_hat_enterprise_linux_8:antlr-javadoc", "red_hat_enterprise_linux_8:antlr-manual", "red_hat_enterprise_linux_8:antlr-tool", "red_hat_enterprise_linux_8:antlr.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_9:antlr-C++", "red_hat_enterprise_linux_9:antlr-tool" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-13503" }, { "category": "external", "summary": "RHBZ#2493994", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493994" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13503", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13503" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13503", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13503" }, { "category": "external", "summary": "https://github.com/wooyun123/wooyun/issues/8", "url": "https://github.com/wooyun123/wooyun/issues/8" }, { "category": "external", "summary": "https://vuldb.com/cve/CVE-2026-13503", "url": "https://vuldb.com/cve/CVE-2026-13503" }, { "category": "external", "summary": "https://vuldb.com/submit/838686", "url": "https://vuldb.com/submit/838686" }, { "category": "external", "summary": "https://vuldb.com/vuln/374497", "url": "https://vuldb.com/vuln/374497" }, { "category": "external", "summary": "https://vuldb.com/vuln/374497/cti", "url": "https://vuldb.com/vuln/374497/cti" } ], "release_date": "2026-06-28T15:15:07.671000+00:00", "remediations": [ { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "red_hat_enterprise_linux_10:antlr-C++", "red_hat_enterprise_linux_10:antlr-javadoc", "red_hat_enterprise_linux_10:antlr-manual", "red_hat_enterprise_linux_10:antlr-tool", "red_hat_enterprise_linux_6:antlr-javadoc", "red_hat_enterprise_linux_6:antlr-manual", "red_hat_enterprise_linux_6:antlr.src", "red_hat_enterprise_linux_7:antlr-C++", "red_hat_enterprise_linux_7:antlr-C++-doc", "red_hat_enterprise_linux_7:antlr-javadoc", "red_hat_enterprise_linux_7:antlr-manual", "red_hat_enterprise_linux_7:antlr-python", "red_hat_enterprise_linux_7:antlr-tool", "red_hat_enterprise_linux_8:antlr-C++", "red_hat_enterprise_linux_8:antlr-javadoc", "red_hat_enterprise_linux_8:antlr-manual", "red_hat_enterprise_linux_8:antlr-tool", "red_hat_enterprise_linux_8:antlr.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_9:antlr-C++", "red_hat_enterprise_linux_9:antlr-tool" ] }, { "category": "no_fix_planned", "details": "Out of support scope", "product_ids": [ "red_hat_enterprise_linux_6:antlr-javadoc", "red_hat_enterprise_linux_6:antlr-manual", "red_hat_enterprise_linux_6:antlr.src", "red_hat_enterprise_linux_7:antlr-C++", "red_hat_enterprise_linux_7:antlr-C++-doc", "red_hat_enterprise_linux_7:antlr-javadoc", "red_hat_enterprise_linux_7:antlr-manual", "red_hat_enterprise_linux_7:antlr-python", "red_hat_enterprise_linux_7:antlr-tool" ] }, { "category": "none_available", "details": "Fix deferred", "product_ids": [ "red_hat_enterprise_linux_10:antlr-C++", "red_hat_enterprise_linux_10:antlr-javadoc", "red_hat_enterprise_linux_10:antlr-manual", "red_hat_enterprise_linux_10:antlr-tool", "red_hat_enterprise_linux_8:antlr-C++", "red_hat_enterprise_linux_8:antlr-javadoc", "red_hat_enterprise_linux_8:antlr-manual", "red_hat_enterprise_linux_8:antlr-tool", "red_hat_enterprise_linux_8:antlr.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_9:antlr-C++", "red_hat_enterprise_linux_9:antlr-tool" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "red_hat_enterprise_linux_10:antlr-C++", "red_hat_enterprise_linux_10:antlr-javadoc", "red_hat_enterprise_linux_10:antlr-manual", "red_hat_enterprise_linux_10:antlr-tool", "red_hat_enterprise_linux_6:antlr-javadoc", "red_hat_enterprise_linux_6:antlr-manual", "red_hat_enterprise_linux_6:antlr.src", "red_hat_enterprise_linux_7:antlr-C++", "red_hat_enterprise_linux_7:antlr-C++-doc", "red_hat_enterprise_linux_7:antlr-javadoc", "red_hat_enterprise_linux_7:antlr-manual", "red_hat_enterprise_linux_7:antlr-python", "red_hat_enterprise_linux_7:antlr-tool", "red_hat_enterprise_linux_8:antlr-C++", "red_hat_enterprise_linux_8:antlr-javadoc", "red_hat_enterprise_linux_8:antlr-manual", "red_hat_enterprise_linux_8:antlr-tool", "red_hat_enterprise_linux_8:antlr.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_9:antlr-C++", "red_hat_enterprise_linux_9:antlr-tool" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "red_hat_enterprise_linux_10:antlr-C++", "red_hat_enterprise_linux_10:antlr-javadoc", "red_hat_enterprise_linux_10:antlr-manual", "red_hat_enterprise_linux_10:antlr-tool", "red_hat_enterprise_linux_6:antlr-javadoc", "red_hat_enterprise_linux_6:antlr-manual", "red_hat_enterprise_linux_6:antlr.src", "red_hat_enterprise_linux_7:antlr-C++", "red_hat_enterprise_linux_7:antlr-C++-doc", "red_hat_enterprise_linux_7:antlr-javadoc", "red_hat_enterprise_linux_7:antlr-manual", "red_hat_enterprise_linux_7:antlr-python", "red_hat_enterprise_linux_7:antlr-tool", "red_hat_enterprise_linux_8:antlr-C++", "red_hat_enterprise_linux_8:antlr-javadoc", "red_hat_enterprise_linux_8:antlr-manual", "red_hat_enterprise_linux_8:antlr-tool", "red_hat_enterprise_linux_8:antlr.src", "red_hat_enterprise_linux_8:grafana", "red_hat_enterprise_linux_8:grafana-azure-monitor", "red_hat_enterprise_linux_8:grafana-cloudwatch", "red_hat_enterprise_linux_8:grafana-elasticsearch", "red_hat_enterprise_linux_8:grafana-graphite", "red_hat_enterprise_linux_8:grafana-influxdb", "red_hat_enterprise_linux_8:grafana-loki", "red_hat_enterprise_linux_8:grafana-mssql", "red_hat_enterprise_linux_8:grafana-mysql", "red_hat_enterprise_linux_8:grafana-opentsdb", "red_hat_enterprise_linux_8:grafana-postgres", "red_hat_enterprise_linux_8:grafana-prometheus", "red_hat_enterprise_linux_8:grafana-selinux", "red_hat_enterprise_linux_8:grafana-stackdriver", "red_hat_enterprise_linux_8:grafana.src", "red_hat_enterprise_linux_9:antlr-C++", "red_hat_enterprise_linux_9:antlr-tool" ] } ], "title": "antlr: ANTLR4: antlr ANTLR4: Path traversal via manipulation of getImportedVocabFile function" } ] }