PT-2025-43432

Name of the Vulnerable Software and Affected Versions Slack Nebula versions prior to 1.9.7 Description Slack Nebula, in some configurations, does not properly handle CIDR Classless Inter-Domain Routing notation. This allows for the acceptance of arbitrary source IP addresses within the Nebula...

FULL - Customer < 2.3 - Subscriber+ Arbitrary Plugin Installation

Description The plugin does not have proper authorisation in its install-plugin REST API, allowing any authenticated users, such as subscriber to install plugins from arbitrary sources...