Raschin Tavakoli

**Nome do software vulnerável e versões afetadas** Versões do SAP S/4HANA anteriores à versão corrigida Versões do DMIS Mobile Plug-In de 2011 1 620 a 2011 1 752, 2020 Versão 125 do SAPSCORE Versões 102 a 105 do S4CORE **Descrição** O problema está relacionado à falta de proteção da estrutura da consulta SQL, permitindo que um invasor remoto execute consultas SQL arbitrárias. Isso pode levar a uma vulnerabilidade de injeção de SQL, afetando significativamente a confidencialidade, integridade e disponibilidade dos sistemas. Um invasor com acesso a uma conta altamente privilegiada pode executar uma consulta manipulada na ferramenta NDZT para obter acesso à conta de superusuário. **Recomendações** Para o SAP S/4HANA, atualize para uma versão que inclua a correção para este problema. Para as versões 2011 1 620 a 2011 1 752 e 2020 do DMIS Mobile Plug-In, atualize para uma versão que inclua a correção para este problema. Para o SAPSCORE versão 125, atualize para uma versão que inclua a correção para este problema. Para as versões 102 a 105 do S4CORE, atualize para uma versão que inclua a correção para este problema. Como solução alternativa temporária, considere restringir o acesso à ferramenta NDZT para minimizar o risco de exploração.

**Name of the Vulnerable Software and Affected Versions** Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0 **Description** The issue allows remote attackers to hijack the authentication of administrators for requests that create a user via a request to "members/memberentry.pl" or give a user superlibrarian permission via a request to "members/member-flags.pl". Additionally, it allows the hijacking of the authentication of arbitrary users for requests that conduct cross-site scripting (XSS) attacks via the `addshelf` parameter to "opac-shelves.pl". **Recommendations** For Koha versions 3.14.x through 3.14.15, update to version 3.14.16 or later. For Koha versions 3.16.x through 3.16.11, update to version 3.16.12 or later. For Koha versions 3.18.x through 3.18.07, update to version 3.18.08 or later. For Koha versions 3.20.x through 3.20.0, update to version 3.20.1 or later.

**Name of the Vulnerable Software and Affected Versions** Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via various parameters, including `tag` to "opac-search.pl", `value` to "authorities/authorities-home.pl", `delay` to "acqui/lateorders.pl", `authtypecode` or `tagfield` to "admin/auth subfields structure.pl", `tagfield` to "admin/marc subfields structure.pl", `limit` to "catalogue/search.pl", and multiple parameters to "serials/serials-search.pl" and "suggestion/suggestion.pl". **Recommendations** For Koha versions 3.14.x through 3.14.15, update to version 3.14.16 or later. For Koha versions 3.16.x through 3.16.11, update to version 3.16.12 or later. For Koha versions 3.18.x through 3.18.07, update to version 3.18.08 or later. For Koha versions 3.20.x through 3.20.0, update to version 3.20.1 or later.

**Name of the Vulnerable Software and Affected Versions** Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0 **Description** The issue allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the `template path` parameter to "svc/virtualshelves/search" or "svc/members/search" API endpoints. **Recommendations** For Koha versions 3.14.x through 3.14.15, update to version 3.14.16 or later. For Koha versions 3.16.x through 3.16.11, update to version 3.16.12 or later. For Koha versions 3.18.x through 3.18.07, update to version 3.18.08 or later. For Koha versions 3.20.x through 3.20.0, update to version 3.20.1 or later.

**Name of the Vulnerable Software and Affected Versions** Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0 **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `number` parameter to "opac-tags subject.pl" in the OPAC interface. Additionally, remote authenticated users can execute arbitrary SQL commands via the `Filter` or `Criteria` parameter to "reports/borrowers out.pl" in the Staff interface. **Recommendations** For Koha versions 3.14.x through 3.14.15, update to version 3.14.16 or later. For Koha versions 3.16.x through 3.16.11, update to version 3.16.12 or later. For Koha versions 3.18.x through 3.18.07, update to version 3.18.08 or later. For Koha versions 3.20.x through 3.20.0, update to version 3.20.1 or later.

**Name of the Vulnerable Software and Affected Versions** Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.20.x through 3.20.0 **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via a crafted list name. This is a type of security issue where an attacker can inject malicious code into a website, potentially allowing them to steal user data or take control of the user's session. **Recommendations** For Koha versions 3.14.x through 3.14.15, update to version 3.14.16 or later. For Koha versions 3.16.x through 3.16.11, update to version 3.16.12 or later. For Koha versions 3.20.x through 3.20.0, update to version 3.20.1 or later.