Summmm

A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3. This impacts the function TrigramIndex::open of the file Storage.php. Such manipulation leads to time-of-check time-of-use. The attack needs to be performed locally. Upgrading to version 1.1.4 will fix this issue. The name of the patch is 0b2fae333d6b022da7ed4c43e2d41aa03f91dff3. Upgrading the affected component is recommended. The project maintainer explains: "[T]he attack requires write access to the index directory by a user other than the one running the application. That is a real shared-hosting scenario and worth defending against, which is why it is fixed but it is a hardening measure rather than a remotely reachable vulnerability, and the "Code Execution" impact additionally assumes the symlink target is a web-served .php file."

A security flaw has been discovered in PipraPay 3.0.0. Affected is the function system-settings-import of the file /sumo166/CVE-apply/blob/main/PipraPay/PipraPay/system-settings-import of the component ZIP Archive Handler. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A weakness has been identified in PipraPay 3.0.0. Affected by this vulnerability is the function hash hmac of the file pp-content/pp-include/pp-adapter.php of the component pp-token anti-CSRF Handler. Executing a manipulation can lead to hard-coded credentials. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A security vulnerability has been detected in PipraPay 3.0.0. Affected by this issue is the function deleteData of the file pp-content/pp-include/pp-functions.php of the component Admin Panel. The manipulation of the argument selected ids/ItemID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was identified in kevquirk PureBlog up to 3.7.2. Impacted is an unknown function of the file admin/upload-image.php of the component Admin Image Upload Endpoint. Such manipulation leads to unrestricted upload. The attack may be launched remotely. Upgrading to version 3.7.3 is recommended to address this issue. The name of the patch is 71f5b0de2ecb2bb2934048ed40e1155c107484e3. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element is the function save page of the file includes/lib/content.php of the component Page Editor. Performing a manipulation of the argument page slug results in path traversal. Remote exploitation of the attack is possible. Upgrading to version 3.7.3 is sufficient to fix this issue. The patch is named 71f5b0de2ecb2bb2934048ed40e1155c107484e3. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Um problema existe no componente Filter Matching dentro da função `SearchEngine::matchesSingleFilter()` localizada no arquivo `src/SearchEngine.php`. A manipulação desta função leva a uma comparação incorreta, o que permite a exploração remota.

Uma falha no componente Search Engine permite que atacantes remotos realizem cross-site scripting (XSS) ao manipular o argumento `Query`. O problema reside na função `SearchEngine::buildHighlights()` localizada no arquivo `src/SearchEngine.php`.

Um problema de autorização incorreta existe no Settings API Endpoint. Um invasor remoto pode manipular a função `AppSettingController.getAppSettings()` no arquivo `backend/src/main/java/org/booklore/controller/AppSettingController.java`. Essa falha permite o acesso não autorizado a configurações através do endpoint `GET /api/v1/settings`.

Um bypass de autorização existe no componente Download Endpoint. Um invasor remoto pode manipular o argumento `bookId` dentro da função `streamFileToResponse()` para ignorar as verificações de segurança.

Um ataque remoto é possível através do componente Self Update Handler. A função `SelfUpdater::update()` no arquivo `app/Updater/SelfUpdater.php` permite o download de código sem verificação de integridade, o que pode levar à execução de código não autorizado.

A injeção de comandos do sistema operacional é possível via ataque remoto no componente Doctor Command Handler. O problema reside nas funções `DoctorCommand::checkSshConnectivity()` e `DoctorCommand::checkRemoteTools()` localizadas no arquivo `app/Commands/DoctorCommand.php`, onde a manipulação inadequada do argumento `host` permite a execução de comandos arbitrários do sistema operacional.

Um problema existe no componente FastAPI, especificamente no arquivo `backend/app/dependencies.py`. A manipulação remota de uma função desconhecida neste arquivo pode levar à ausência de autenticação, permitindo acesso não autorizado.

Uma manipulação remota da função `ExposeApiAspect.beforeExposeApi()` no arquivo `ExposeApiAspect.java` pode levar à exposição de credenciais codificadas rigidamente (hard-coded).

Um ataque remoto é possível devido ao uso de uma chave criptográfica codificada rigidamente (hard-coded) dentro da função `encryptKey()` da classe `HostKeyServiceImpl`. Este problema permite o potencial comprometimento de dados criptografados manipulados pelo sistema.

Uma falha de segurança existe na função `MD5Encrypt()` dentro do arquivo internal/util/crypto/crypto.go. Este problema envolve o uso de um algoritmo criptográfico arriscado, o que poderia permitir a exploração remota. A complexidade do ataque é alta e a exploração é considerada difícil.

Uma falha de segurança permite que atacantes remotos realizem SQL injection, uma técnica usada para interferir nas consultas que um aplicativo faz ao seu banco de dados. O problema reside na função `Transaction::getAll()` dentro do arquivo `application/models/Transaction.php`. A falha é acionada através da manipulação dos argumentos `orderBy` ou `orderFormat`.

A injeção remota de código é possível através da manipulação do argumento `exec` dentro da função `Authenticate()` localizada no arquivo core/webhook.go.

Uma falha de injeção de comando de SO existe no componente Management API, dentro da função `shellExecCommand()` do arquivo `core/engine.go`. Um invasor remoto pode explorar isso manipulando o argumento `exec` para executar comandos arbitrários do sistema operacional.