Snappyjack

An issue in XZ allows attackers to cause a denial of service via decompression of a crafted file. The vendor disputes the claims of "endless output" and "denial of service" because decompression of a 17,486 bytes file always results in 114,881,179 bytes, which is often a reasonable size increase.

The issue arises from a buffer overflow that occurs when PDFResurrect mishandles data associated with `startxref` and `%%EOF` in a crafted PDF file.

The issue allows attackers to upload and execute arbitrary PHP code. This can be achieved by uploading a ZIP archive containing a .php file through the "/Public/?g=Team&m=Setting&a=upgrade" API endpoint.

The issue concerns multiple reflected XSS instances. These occur via the `keyword` parameter in several API endpoints: "g=Team&m=User&a=index&keyword=", "g=Team&m=User group&a=index&keyword=", "g=Team&m=Department&a=index&keyword=", and "g=Team&m=Bulletin&a=index&keyword=".

The issue allows creation of files via the "/admin/?/plugin/file manager/save" API endpoint.

The issue is related to stored XSS. It can be exploited via the "/admin/?/plugin/comment/settings" API endpoint.