D solo authorization issue vulnerability

D solo 4.4.0 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of an ownership check for authors in ArticleConsole. As a result, authenticated authors can access articles of other authors. Attackers can query the console’s article status endpoi...

Qiantong Tech qKnow Authorization Issues Vulnerability

Qiantong Tech’s version 2.4.3 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authentication. Unauthenticated remote attackers can access the /flyflow workflow integration endpoint allowed in SecurityConfig. By submitting consecutive userId values to...

Mattermost authorization issue vulnerabilities

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue vulnerability. This vulnerability stems from the fact that Slack import account binding is not...

Rachel Weirs Code Injection Vulnerability

Rachel WeRSS versions 1.5.3 and earlier have a code injection vulnerability. This vulnerability stems from the lack of input validation for the template parameter in the public GET /rss/feedid API. Attackers can bypass the eval blacklist by using non-built-in ext values and =expression templates...

zmister2016 MrDoc Authorization Issue Vulnerability

zmister2016 MrDoc versions 1.1.1 and earlier have an authorization issue. This vulnerability stems from the lack of object-level authorization in the ImportLocalDoc API. It may allow authenticated users to modify other users’ documents and projects by sending PUT requests containing arbitrary...

ChaskiqHQ Chaskiq Server Request Forgery Vulnerability

ChaskiqHQ Chaskiq 2.0.3 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from improper handling of URL parameters at the /oembed endpoint. Unverified attackers can use FetchLinkCardService to send server requests to arbitrary URLs, access loopback,...

Mattermost authorization issue vulnerabilities

Mattermost versions 11.10.0 and earlier of 11.10.x series, 11.7.9 and earlier of 11.7.x series, 11.9.1 and earlier of 11.9.x series, and 11.8.5 and earlier of 11.8.x series have an authorization issue vulnerability. This vulnerability stems from the lack of verification of the recipient’s email...

Mattermost information leakage vulnerability

Mattermost versions 11.9.1 and earlier of 11.9.x series, 11.8.5 and earlier of 11.8.x series, 11.7.10 and earlier of 11.7.x series, and 11.10.1 and earlier of 11.10.x series have a vulnerability related to information leakage. This vulnerability arises from the lack of a requirement to re-enter t...

gz-yami Mall4cloud Authorization Issue Vulnerability

gz-yami Mall4cloud versions 4.0 and earlier have an authorization issue vulnerability. This vulnerability stems from the improper handling of the orderAddrId parameter in the getOrderAddr processing routine of the multishop OrderController. There is a security vulnerability involving direct objec...

Wayn111 Waynboot-Mall Authorization Issue Vulnerability

Wayn111 and Waynboot-Mall versions 2.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the /callback/email endpoint. Unverified attackers can submit any subject, content, and recipient via EmailController.sendEmail, thereby usi...

Safing Portmaster Authorization Issue Vulnerability

Versions of Safing Portmaster prior to 2.2.5 have a vulnerability related to authorization verification. This vulnerability arises from the lack of authorization checks; local processes with privileged access can force updates by calling the POST /api/v1/updates/from-url endpoint. Attackers can...

FreeRDP has a numerical error vulnerability

FreeRDP versions 3.29.0 to 3.32.0 have a numerical error vulnerability. This vulnerability stems from integer overflows occurring during the Apple Audin backend’s calculations for audio queue buffer sizes. Malicious RDP servers can send specially crafted FramesPerPacket requests, resulting in...

Rocboss PaoPao Authorization Issue Vulnerability

Robcoboss PaoPao versions 0.6.0-alpha.3 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the DownloadAttachment function. Attackers can enumerate consecutive postcontent IDs through the /v1/attachment endpoint, thereby...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9380: Backport to odf-4.17.z Backport CA related fixes for NooBaa DFBUGS-7336: Backport to odf-4.17.z 5.2...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking The catcprobe function fills three URBs with hardcoded endpoint pipes without verifying the endpoint descriptors: - usbsndbulkpipeusbdev, 1 and usbrcvbulkpipeusbdev, 1 for TX/RX...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fixed a potential NULL pointer dereference in zdmactxtodev. There is a potential NULL pointer dereference in zdmactxtodev. For example, the following situation may occur: c T0 T1 zdmactxtodev / len == skbqueuelenq...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: venus: Fixed the issue where a use-after-free occurred in vdecclose. It seems that there might be a potential use-after-free when using vdecclose. The firmware will add the buffer release process to the work queue through...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fixed handling of connection failures In cases where immediate MPA Media Plane API request processing fails, the newly created endpoint unlinks from the listening endpoint and becomes ready to be dropped. This special...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: dmaengine: fsl-qdma: A memory leak related to the queue command’s DMA operations has been fixed. The dmaalloccoherent function is not canceled either in the remove function, nor in the error handling path of fslqdmaprobe. Swit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xdp: generate a warning when the calculated tailroom is negative. Many Ethernet drivers report that the xdp Rx queue frag size is the same as the DMA write size. However, the only user of this field, namely bpfxdpfragsincreasetai...