Iamsushi

The issue is related to improper access control in the reporting engine, allowing remote attackers to download PDF reports for arbitrary documents via crafted requests.

The issue is a cross-site scripting (XSS) problem in the Discuss app, allowing remote attackers to inject arbitrary web script in the browser of a victim by posting crafted contents.

O problema está relacionado à validação inadequada de entradas no componente do portal, permitindo que invasores remotos induzam as vítimas a modificar suas contas por meio de links maliciosos, levando à escalada de privilégios.