APT trends report Q3 2023

For more than six years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. These summaries are based on our threat intelligence research; and they provide a representative snapshot of what we have published...

Discover and Assess the Risk of Embedded Open-Source Software (OSS) Vulnerabilities

Runtime Software Composition Analysis with the Qualys Cloud Agent In a blog post published last week, we discussed the importance of managing risk across software developed in-house. A great deal of that risk is introduced by vulnerabilities in open-source packages like Log4Shell, OpenSSL, etc...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in insufficient validation of input data, which allows attackers to exploit their privileges.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a direct reference to the...

DotCMS Cross-Site Scripting Vulnerability

DotCMS is an open source content management system written in Java by DotCMS Inc. for managing content and content-driven sites and applications. A cross-site scripting vulnerability exists in DotCMS. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Oracle MySQL Security Vulnerabilities

Oracle MySQL is an open source relational database management system from Oracle Corporation. A security vulnerability previously existed in Oracle MySQL Server version 8.0.34, which originated from a vulnerability that allowed an attacker with elevated privileges to compromise the MySQL server v...

eSST Monitoring Code Injection Vulnerability

Sourceforge eSST Monitoring is an open source monitoring system from Sourceforge. A security vulnerability exists in eSST Monitoring version v2.147.1, which stems from a Remote Code Execution RCE vulnerability in the Gii code generator component...

Pimcore Admin Login Cross-Site Scripting

Pimcore is an open-source enterprise software written in PHP and offering multiple features like product information, customer data, digital assets or content management. Pimcore versions before 10.5.21 suffer from a Cross-Site Scripting XSS vulnerability in the admin panel login through the...

Apache Airflow Information Disclosure Vulnerability (CNVD-2023-85610)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from an information disclosure vulnerability that can be...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores relates to insufficient verification of incoming requests. This allows attackers to carry out SSRF attacks.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores is related to insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending a specially crafted HTTP...

The vulnerability of software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the insufficient protection of sensitive data. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the uncontrolled resource consumption, which allows attackers to cause service failures.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2023-44388

Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the server running out of disk space. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. It is possible to...

Information disclosure

Discourse is an open source platform for community discussion. Attackers with details specific to a poll in a topic can use the /polls/groupedpollresults endpoint to view the content of options in the poll and the number of votes for groups of poll participants. This impacts private polls where t...

Design/Logic Flaw

Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when hideuserprofilesfrompublic is enabled. This problem has been patched in the 3.1.1 stable and 3.2.0.beta2 version of Discourse. Users are advised to upgrade. There are no know...

Design/Logic Flaw

MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit 65c44883f which has been included in release...

CVE-2023-45131 Unauthenticated access to new private chat messages in Discourse

Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. Users are advised to upgrade. There are no known workarounds for...

CVE-2023-45131

CVE-2023-45131 affects Discourse prior to 3.1.1 stable and prior to 3.2.0.beta2. The issue allows reading new chat messages by an unauthenticated POST to the MessageBus endpoint, representing an unauthenticated disclosure of private chat content. Root cause details are not explicitly stated in th...

CVE-2023-45131 Unauthenticated access to new private chat messages in Discourse

Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. Users are advised to upgrade. There are no known workarounds for...

CVE-2023-44391

Concrete details across connected sources confirm CVE-2023-44391 affects Discourse: anonymous access to user summaries occurs despite hide_user_profiles_from_public, indicating a data exposure vulnerability in the user summaries feature. Root cause is described as a vulnerability that allows acce...

CVE-2023-45147

Discourse is an open source community platform. In affected versions any user can create a topic and add arbitrary custom fields to a topic. The severity of this vulnerability depends on what plugins are installed and how the plugins uses topic custom fields. For a default Discourse installation...