Design/Logic Flaw

XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, Mail.MailConfig can be edited by any logged-in user by default. Consequently, they can change the mail obfuscation configuration and view and edit the mail sending...

SUSE-SU-2023:2624-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case bsc1207534...

SUSE-SU-2023:2623-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case bsc1207534. - Update further expiring...

CVE-2023-32419

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.5 and iPadOS 16.5. A remote attacker may be able to cause arbitrary code execution...

CVE-2023-32420

CVE-2023-32420 is an out-of-bounds read vulnerability reported in Apple’s IOSurfaceAccelerator (noted within watchOS/WebKit-related advisories) that can allow an app to cause unexpected system termination or read kernel memory. The issue is mitigated by improved input validation and is fixed in i...

CVE-2023-32371

CVE-2023-32371 affects Apple platforms (iOS, iPadOS, macOS) where an app may escape its sandbox. Apple reports fixes in iOS 16.5, iPadOS 16.5, and macOS Ventura 13.4, with mitigations described as “improved checks.” The vulnerability is categorized by Apple as a sandbox escape across multiple com...

CVE-2023-32320

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to...

CVE-2023-32320 Nextcloud Server's brute force protection allows someone to send more requests than intended

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are sent in parallel, all of them were executed even if the amount of faulty requests succeeded the limit by the time the response was sent to the client. This allowed someone to...

XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page

Impact Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the DeleteApplication page to perform a XSS, e.g. by using URL such as:...

GHSA-R8XC-XXH3-Q5X3 XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template

Impact Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as:...

User scoped external storage can be used to gather credentials of other users

None...

Vulnerability fixed in Juniper JunOS

Juniper has fixed a vulnerability in JunOS. A unauthenticated malicious person could exploit the vulnerability to cause cause a denial-of-service. The vulnerability is in the way BGP traffic is handled. In specific circumstances, a BGP update can result in the disconnection of the connection...

openssl security and bug fix update

3.0.7-16.0.1 - Replace upstream references Orabug: 34340177 1:3.0.7-16 - Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz2211396 1:3.0.7-15.1 - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 paramet...

PT-2023-3611 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming versions 0.4.7 Description: The issue is caused by a buffer overflow in the parseSWF DEFINEFONTINFO function. This can be exploited by a remote attacker to cause a denial of service or execute arbitrary code. The buffer overflow occur...

SUSE-SU-2023:2253-2 Security update for terraform-provider-aws

This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release bsc1200441 bsc1209658...

texlive security update

9:20200406-26 - Resolves: 2209872, CVE-2023-32700...

CVE-2023-35166 Privilege escalation (PR) from account through TipsPanel

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5...

CLSA-2023-1687282015 Fix CVE(s): CVE-2023-2650

SECURITY UPDATE: Potential denial of service in OBJobj2txt translation - debian/patches/CVE-2023-2650.patch: Restrict size that OBJobj2txt will translate to canonical numeric text form is added, based on RFC 2578 - CVE-2023-2650...

GHSA-RF8J-Q39G-7XFM XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults

Impact Any logged in user can add dangerous content in their first name field and see it executed with programming rights. Leading to rights escalation. Patches The vulnerability has been fixed on XWiki 14.4.8, 14.10.6, and 15.1. Workarounds The vulnerability can be fixed by applying this patch. ...

XWiki Platform may show email addresses in clear in REST results

Impact Any user can call a REST endpoint and obtain the obfuscated passwords even when the mail obfuscation is activated. For instance, by calling http://localhost:8080/xwiki/rest/wikis/xwiki/spaces/XWiki/pages/U1/objects/XWiki.XWikiUsers/0 when user U1 exists on wiki xwiki. Patches The issue has...