Leon

**Nome do Software Vulnerável e Versões Afetadas** Apache APISIX versões 2.14.1 até 3.16.0 **Description** Um problema de autorização incorreta existe no plugin `authz-casdoor` ao utilizar a configuração padrão. Isso permite que um invasor se autentique usando credenciais de uma fonte diferente. **Recommendations** Atualizar para a versão 3.17.0.

**Nome do Software Vulnerável e Versões Afetadas** Apache APISIX versões 3.11.0 até 3.16.0 **Description** Existe uma falha de bypass de autenticação devido a um problema de captura e repetição (capture-replay). Um invasor pode aproveitar configurações específicas no módulo `hmac-auth` para reutilizar um token indefinidamente, ignorando o mecanismo de expiração do token. **Recommendations** Atualizar para a versão 3.17.0.

**Name of the Vulnerable Software and Affected Versions** FreeXL versions prior to 1.0.5 **Description** A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a memcpy call of the `parse SST` function. This issue affects versions prior to 1.0.5. **Recommendations** For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `parse SST` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FreeXL versions prior to 1.0.5 **Description** A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the `freexl::destroy cell` function. This issue affects versions prior to 1.0.5. **Recommendations** For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `freexl::destroy cell` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FreeXL versions prior to 1.0.5 **Description** An issue was discovered in FreeXL, where there is a heap-based buffer over-read in the `read mini biff next record` function. This issue affects versions prior to 1.0.5. **Recommendations** For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `read mini biff next record` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FreeXL versions prior to 1.0.5 **Description** A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the `parse unicode string` function. This issue affects versions prior to 1.0.5. **Recommendations** For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `parse unicode string` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** FreeXL versions prior to 1.0.5 **Description** A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in a pointer dereference of the `parse SST` function. This issue affects versions prior to 1.0.5. **Recommendations** For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the `parse SST` function until a patch is available.