Sayooj B Kumar

The issue is related to insufficient validation of incoming requests, allowing an authenticated user with Connection edit privileges to access connection information and exploit the test connection feature. This can lead to a denial of service (DoS) condition on the server by sending many requests. Malicious actors can also establish harmful connections with the server.

A problematic issue affects the function `0x82730088` in the library `VIRAGTLT.sys` of the component IoControlCode Handler, leading to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

O problema está relacionado a uma falha de falsificação de solicitação do lado do servidor (SSRF) por meio da função `defaultIpChecker`. Ela não verifica adequadamente se o endereço IP solicitado é privado.

O problema diz respeito à contaminação de protótipos ao carregar arquivos de configuração. Isso afeta o pacote config-handler.