Ashik Mohamed

**Name of the Vulnerable Software and Affected Versions** KubeSphere (affected versions not specified) **Description** The cluster-controller reconciliation process in the `addCluster` function (located in `pkg/utils/clusterclient/clusterclient.go`) processes connection configurations for Cluster custom resources. It calls `Discovery().ServerVersion()` against the specified Kubernetes API endpoint after performing only basic URL syntax parsing via `url.Parse`. Because there is no allow or deny-list for loopback, RFC1918 private ranges, link-local, or cloud-metadata addresses (such as 169.254.169.254), a user with permissions to create or update a Cluster CRD can force the controller-manager and apiserver pods to send outbound requests to arbitrary internal or metadata endpoints. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Gophish versions prior to 0.12.2 **Description** Authenticated users with the User role can cause a denial of service by uploading a specially crafted Office document as an email template attachment. The `ApplyTemplate()` function in models/attachment.go processes these documents as ZIP archives and uses `ioutil.ReadAll()` on each file entry without enforcing size restrictions on the uncompressed content. This allows a zip bomb—a malicious archive designed to expand to an enormous size when decompressed—to consume several gigabytes of server memory, leading the operating system to terminate the process. **Recommendations** Update Gophish to version 0.12.2 or later.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Human Resource Management System version 1.0 **Description** A stored cross-site scripting issue exists in the Notice Board Management component within the file '/notice/All notice'. A remote attacker can execute this by manipulating the `Notice Title` argument via a POST request. Cross-site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.