Stolichnayer

**Nome do Software Vulnerável e Versões Afetadas** Versões do Frappe anteriores à 14.99.14 Versões do Frappe anteriores à 15.94.0 **Descrição** Uma URL de cadastro maliciosa elaborada para um site Frappe pode resultar em redirecionamento aberto ou cross-site scripting (XSS) refletido, dependendo do payload elaborado, quando um usuário se cadastra. O problema ocorre quando um usuário acessa uma URL especialmente projetada. **Recomendações** Atualize para a versão 14.99.14 do Frappe ou posterior. Atualize para a versão 15.94.0 do Frappe ou posterior.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A broken access control issue allows authenticated students to add content to existing course units, despite this action being restricted to users with higher privileges. The issue affects versions prior to 4.2. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A Stored Cross-Site Scripting (XSS) issue exists in versions before 4.2, allowing authenticated high-privileged users, such as teachers or administrators, to inject malicious JavaScript into user-controllable input fields. This injected script is then executed when other users access the affected pages. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, a course management system, contains a Stored Cross-Site Scripting (XSS) issue. Authenticated students can inject malicious JavaScript into user profile fields. This JavaScript is executed when users with viewing privileges access the affected application pages. Stored Cross-Site Scripting (XSS) occurs when malicious scripts are persistently stored on the target servers, such as in databases, message forums, visitor logs, or comment fields. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A file upload validation bypass allows attackers to upload files with restricted extensions by including them within ZIP archives. The application then extracts these archives using its built-in decompression feature, circumventing the intended file type restrictions. The vulnerable functionality resides in the application’s file upload process and decompression functionality. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A Reflected Cross-Site Scripting (XSS) issue exists in versions prior to 4.2, potentially allowing remote attackers to execute arbitrary JavaScript within the security context of authenticated users. This is achieved by creating malicious URLs and deceiving users into accessing them. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A security issue exists where an unauthenticated remote attacker can access personal files belonging to other users. This is possible by directly requesting predictable user identifiers, exploiting an Insecure Direct Object Reference (IDOR). An IDOR occurs when an application uses user-supplied input to directly access objects based on that input. In this case, the application fails to properly validate the user's authorization before granting access to files. The `user identifiers` are predictable, allowing attackers to enumerate and access files they should not have permission to view. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A flaw in the system’s logic allows authenticated students to incorrectly record their attendance in activities, even those that have ended, by using a specially created URL. This affects all versions before 4.2. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system susceptible to a username enumeration issue. An unauthenticated attacker can determine valid user accounts by observing variations in the login response. The `/login` endpoint is affected, allowing attackers to test different usernames (`username`) and analyze the system's response to identify active accounts. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A stored Cross-Site Scripting (XSS) issue exists in versions before 4.2, enabling authenticated students to inject malicious JavaScript into assignment files. When instructors view these submissions, the injected script is executed. The vulnerability involves the upload of assignment files where a student can insert malicious code. This code is then executed when an instructor views the submitted assignment. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A Cross-Site Request Forgery (CSRF) issue exists in teacher-restricted endpoints prior to version 4.2. This allows attackers to trick authenticated teachers into performing unwanted actions, such as altering assignment grades, through specially designed requests. The affected endpoints allow unauthorized actions. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A flaw exists where active user sessions are not invalidated after a password change. This allows existing session tokens to remain valid, potentially granting unauthorized continued access to user accounts. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A flaw in the password reset process in versions prior to 4.2 allows a local attacker to reuse a valid password reset token after it has been used. This can lead to unauthorized password changes and potential account takeover. **Recommendations** Update to version 4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Open eClass versions prior to 4.2 **Description** The Open eClass platform, previously known as GUnet eClass, is a course management system. A broken access control issue permits authenticated students to create new course units, a function typically reserved for users with greater privileges. The issue allows unauthorized creation of course units. **Recommendations** Update to version 4.2 or later.

**Nome do Software Vulnerável e Versões Afetadas** Frappe CRM versões anteriores a 1.56.2 **Descrição** Usuários autenticados podem definir URLs manipuladas em um campo de website que não são sanitizadas, levando ao cross-site scripting (XSS), uma condição onde scripts maliciosos são injetados em sites confiáveis. **Recomendações** Atualizar para a versão 1.56.2.

**Nome do Software Vulnerável e Versões Afetadas** OpenNebula Community Edition (CE) versões anteriores à 7.0.0 OpenNebula Enterprise Edition (EE) versões anteriores à 6.10.3 **Descrição** Uma condição de corrida crítica existe no FireEdge que pode levar à tomada de conta completa. Um atacante não autenticado pode obter um JSON Web Token (JWT) válido pertencente a um usuário legítimo sem conhecer suas credenciais. Um JWT é um meio compacto e seguro para URL de representar afirmações a serem transferidas entre duas partes. **Recomendações** Atualize o OpenNebula Community Edition (CE) para a versão 7.0.0 ou posterior. Atualize o OpenNebula Enterprise Edition (EE) para a versão 6.10.3 ou posterior.

**Nome do Software Vulnerável e Versões Afetadas** Summer Pearl Group Vacation Rental Management Platform versões até a 1.0.1 **Descrição** Uma vulnerabilidade foi encontrada no componente Manipulador de Cabeçalho de Resposta HTTP da Summer Pearl Group Vacation Rental Management Platform, resultando em divulgação de informações. A manipulação pode ser executada remotamente. **Recomendações** Para as versões da Summer Pearl Group Vacation Rental Management Platform até a 1.0.1, atualize para a versão 1.0.2 para corrigir este problema.

**Nome do Software Vulnerável e Versões Afetadas** Summer Pearl Group Vacation Rental Management Platform versões até a 1.0.1 **Descrição** Uma vulnerabilidade foi encontrada na Summer Pearl Group Vacation Rental Management Platform, afetando uma funcionalidade desconhecida e resultando em falsificação de solicitação entre sites. O ataque pode ser executado remotamente. **Recomendações** Para a Summer Pearl Group Vacation Rental Management Platform versões até a 1.0.1, atualize para a versão 1.0.2 para corrigir este problema.

**Name of the Vulnerable Software and Affected Versions** Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1 **Description** A critical vulnerability has been found in the Listing Handler component of the Summer Pearl Group Vacation Rental Management Platform, affecting unknown code and leading to authorization bypass. The attack can be initiated remotely. **Recommendations** For Summer Pearl Group Vacation Rental Management Platform versions up to 1.0.1, upgrade to version 1.0.2 to address this issue. It is recommended to upgrade the affected Listing Handler component.

**Nome do Software Vulnerável e Versões Afetadas** Summer Pearl Group Vacation Rental Management Platform versões até 1.0.1 **Descrição** Uma vulnerabilidade foi encontrada na Summer Pearl Group Vacation Rental Management Platform, afetando algum processamento desconhecido do componente Header Handler. A manipulação do argumento `Host` leva a um redirecionamento aberto. O ataque pode ser iniciado remotamente. **Recomendações** Para as versões da Summer Pearl Group Vacation Rental Management Platform até 1.0.1, atualize para a versão 1.0.2 para corrigir este problema. Como solução temporária, considere restringir a manipulação do argumento `Host` no componente Header Handler até que a atualização seja aplicada.