Camunda 7 Authorization Vulnerability

Versions of Camunda 7 prior to 7.24.14, including 7.24.0 and 7.23.0 before 7.23.17, have an authorization issue. This issue stems from a lack of authorization checks in the engine-rest task sub-resources. Single read and delete endpoints do not perform the necessary authorization filtering checks...

ToolJet getComment() Privilege Escalation

The vulnerability of the getComment function on the ToolJet platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

PT-2022-4501 · Tooljet · Tooljet

Name of the Vulnerable Software and Affected Versions: ToolJet affected versions not specified Description: The issue is related to insufficient access control in the getComment function of the ToolJet platform, which can be exploited by a remote attacker to elevate their privileges. This...

OSV-2017-117 Use-of-uninitialized-value in CharToWide

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4290 Crash type: Use-of-uninitialized-value Crash state: CharToWide Archive::GetComment Archive::ViewComment...

OSV-2017-95 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4410 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

OSV-2017-3 Use-of-uninitialized-value in Archive::GetComment

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4610 Crash type: Use-of-uninitialized-value Crash state: Archive::GetComment Archive::ViewComment CmdExtract::ExtractArchive...

PT-2021-27398

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the following functions: CharToWide, Archive::GetCommen...

PT-2021-27437

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: Archive::GetComment,...

PT-2021-27454

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: Archive::GetComment,...

PT-2021-27420

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: Archive::GetComment,...

PT-2021-27453

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the CharToWideMap and CharToWide functions, which are...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment

Detailed report: https://oss-fuzz.com/testcase?key=6092476424126464 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::GetComment Archive::ViewComme...