[ADMINAPI-1090] Multitenant in the Adminconsole endpoints

[jagudelo-gap]

No description provided.

[github-actions]

🔍 Vulnerabilities of development:latest

📦 Image Reference development:latest

digest	sha256:30a5938ee2c9a7e5647582f66485ce056c3af498ce92a6df4a2225c3c9c77d2f
vulnerabilities
platform	linux/amd64
size	108 MB
packages	653

📦 Base Image alpine:3

also known as	3.20 3.20.3 latest
digest	sha256:33735bd63cf84d7e388d9f6d297d348c523c044410f553bd878c6d7829612735
vulnerabilities

System.Net.Security 4.3.0 (nuget) pkg:nuget/System.Net.Security@4.3.0 Improper Input Validation Affected range >=4.3.0 <4.3.1 Fixed version 4.3.1 CVSS Score 7.5 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Description A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range. Improper Input Validation Affected range >=4.3.0 <4.3.1 Fixed version 4.3.1 CVSS Score 7.3 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Description See https://nvd.nist.gov/vuln/detail/CVE-2017-0249 & https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0249 Improper Input Validation Affected range >=4.3.0 <4.3.1 Fixed version 4.3.1 CVSS Score 5.3 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests. Improper Certificate Validation Affected range >=4.3.0 <4.3.1 Fixed version 4.3.1 Description Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

Microsoft.NETCore.App 1.1.0 (nuget) pkg:nuget/Microsoft.NETCore.App@1.1.0 Improper Input Validation Affected range >=1.1.0 <1.1.4 Fixed version 1.1.4 CVSS Score 7.5 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in denial of service, aka .NET Denial of Service Vulnerability. Improper Certificate Validation Affected range >=1.0.0 <2.0.3 Fixed version 2.0.3 CVSS Score 7.5 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET CORE Denial Of Service Vulnerability".

System.Net.Http 4.3.0 (nuget) pkg:nuget/System.Net.Http@4.3.0 Exposure of Sensitive Information to an Unauthorized Actor Affected range <4.3.4 Fixed version 4.3.4 CVSS Score 7.5 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Description An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0.

System.Text.RegularExpressions 4.3.0 (nuget) pkg:nuget/System.Text.RegularExpressions@4.3.0 Inefficient Regular Expression Complexity Affected range >=4.3.0 <4.3.1 Fixed version 4.3.1 CVSS Score 7.5 CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings, aka '.NET Framework and .NET Core Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-0980, CVE-2019-0981.

Microsoft.NETCore.Jit 1.1.0 (nuget) pkg:nuget/Microsoft.NETCore.Jit@1.1.0 Affected range >=1.1.0 <1.1.7 Fixed version 1.1.7 CVSS Score 7.5 CVSS Vector CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability".