Dawid Czarnecki

An issue was discovered in the app/Controller/AppController.php file, where it mishandles parameter parsing.

An issue was discovered in the app/Model/AppModel.php file, where it lacks a checkParam function for characters such as alphanumerics, underscore, dash, period, and space.

An issue was discovered in the app/Model/AppModel.php file, where it mishandles filters.

An issue was discovered in the app/Model/AppModel.php file, where it mishandles order clauses.

An issue was discovered where the app/Controller/Component/IndexFilterComponent.php file does not properly filter out query parameters.

The issue allows an unauthenticated remote attacker to access internal information about the application, such as versions, host names, or IP addresses. No personal information or application data was exposed.

The issue is related to an XSS in authkey add via a Referer field in the app/View/AuthKeys/authkey display.ctp file.

The issue is related to Cross-Site Scripting (XSS) in the template file uploads, specifically in the app/View/Templates/upload file.ctp file. This allows for malicious script execution.

The issue allows XXE attacks via an XML document, leading to NTLMv2-SSP hash disclosure. This occurs when processing a malicious XML document.

The issue is related to weak file permissions under the Public Profile, which can lead to the disclosure of file contents or privilege escalation.

An issue was discovered in MISP where PHAR deserialization can occur.

The issue is related to a Cross-Site Scripting (XSS) vulnerability in the app/Controller/OrganisationsController.php file, specifically in situations involving a "weird single checkbox page."

The issue is related to a Cross-Site Scripting (XSS) vulnerability in the cerebrate view. This occurs when one administrator enters a `javascript:` URL in the `URL` field, and another administrator clicks on it, allowing for the execution of malicious JavaScript code.

An issue was discovered in the event graph via a tag name, allowing stored XSS.

The issue is related to stored XSS in the galaxy clusters.

An issue was discovered in MISP, where there is stored XSS via the LinOTP login field.

An issue was discovered that allowed an unprivileged user to edit and modify sharing groups due to an incorrect sharing group ACL.

An issue was discovered that allows username enumeration to occur.

An issue was discovered that allows reflected XSS in form descriptions via a user-controlled description. This occurs in the genericForm component.

Name of the Vulnerable Software and Affected Versions: KNIME Server versions 4.12.5 and earlier KNIME Server versions 4.13.x before 4.13.4 Description: The issue allows local users to read the administrator's password from a file due to inadequate file access controls when the software is installed in unattended mode. Recommendations: For KNIME Server versions 4.12.5 and earlier, update to version 4.12.6 or later. For KNIME Server versions 4.13.x before 4.13.4, update to version 4.13.4 or later.