Bananabr

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An authenticated administrator without super-user privileges can inject a JavaScript payload when creating a maintenance period. This payload is executed when any user opens the tooltip for that specific maintenance period within the Host navigator widget, potentially allowing the attacker to perform unauthorized actions based on the permissions of the user who triggers the tooltip. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NoMachine (affected versions not specified) **Description** This issue allows local attackers to escalate privileges on affected installations of NoMachine. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system. The specific flaw exists within nxnode.exe, where the process loads a library from an unsecured location, allowing an attacker to leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** dc2niix versions prior to 1.0.20240202 **Description** The issue allows a local attacker to execute arbitrary code via a generated file name that is not properly escaped and injected into a system call when certain types of compression are used. **Recommendations** For versions prior to 1.0.20240202, update to version 1.0.20240202 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** DCMTK version 3.6.8 **Description** The issue is related to a buffer overflow vulnerability in the EctEnhancedCT method component of the DCMTK library, which is used for working with the DICOM format. This vulnerability is associated with the copying of a buffer without checking the input data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information. The vulnerability allows an attacker to execute arbitrary code. **Recommendations** For DCMTK version 3.6.8, consider disabling the EctEnhancedCT method component as a temporary workaround until a patch is available. Restrict access to the DCMTK library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Vditor versions prior to 3.8.7 **Description** Vditor is a browser-side Markdown editor. The issue at hand is a copy-paste cross-site scripting (XSS) problem. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. **Recommendations** For versions prior to 3.8.7, update to version 3.8.7 to resolve the issue. As a temporary workaround, consider restricting the use of the text editor until the patch is applied.

**Name of the Vulnerable Software and Affected Versions** Microweber versions 1.2.12 and prior **Description** The issue concerns a copy-paste cross-site scripting (XSS) flaw. This type of XSS requires the victim to be tricked into copying a malicious payload into the text editor. **Recommendations** For versions 1.2.12 and prior, update to a version that includes a complete fix for the copy-paste XSS issue, as the fixes attempted in versions 1.2.9 and 1.2.12 are incomplete. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** textAngular versions 1.5.16 and prior **Description** The issue is related to copy-paste cross-site scripting (XSS) in textAngular, a text editor for Angular.js. For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. **Recommendations** For versions 1.5.16 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Editor.js versions prior to 2.26.0 **Description** The issue concerns a code injection vulnerability via pasted input in Editor.js, a block-style editor. The `processHTML` method is vulnerable as it passes pasted input into the wrapper's `innerHTML`. This allows for potential code injection attacks. **Recommendations** For versions prior to 2.26.0, update to version 2.26.0 to resolve the issue. As a temporary workaround, consider disabling the `processHTML` method until the patch is applied. Restrict access to pasted input to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** NVIDIA GPU Display Driver for Windows (affected versions not specified) **Description** The issue is related to insufficient input validation in the NVIDIA GPU Display Driver, allowing an unprivileged user to access or modify system files, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jodit Editor (affected versions not specified) **Description** Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. It is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Toast UI Grid versions prior to 4.21.3 **Description** The issue concerns cross-site scripting attacks that can occur when pasting specially crafted content into editable cells. This can be exploited by attackers to execute malicious scripts. **Recommendations** For versions prior to 4.21.3, update to version 4.21.3 to resolve the issue. At the moment, there are no known workarounds for this issue.

**Name of the Vulnerable Software and Affected Versions** Metabase versions prior to 0.40.8 and 1.40.8 Metabase versions prior to 0.41.7 and 1.41.7 Metabase versions prior to 0.42.4 and 1.42.4 **Description** Metabase is an open source business intelligence and analytics application. In affected versions, Metabase ships with an internal development endpoint `/ internal` that can allow for cross site scripting (XSS) attacks, potentially leading to phishing attempts with malicious links that could lead to account takeover. **Recommendations** For Metabase versions prior to 0.40.8 and 1.40.8, upgrade to version 0.40.8 or 1.40.8 or block access in your firewall to `/ internal` endpoints. For Metabase versions prior to 0.41.7 and 1.41.7, upgrade to version 0.41.7 or 1.41.7 or block access in your firewall to `/ internal` endpoints. For Metabase versions prior to 0.42.4 and 1.42.4, upgrade to version 0.42.4 or 1.42.4 or block access in your firewall to `/ internal` endpoints.

Name of the Vulnerable Software and Affected Versions: OpenProject versions 12.0.0 through 12.0.3 Description: OpenProject is a web-based project management software. The software is vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget insufficiently sanitizes user input in the `reassign to id` parameter. Recommendations: For OpenProject versions 12.0.0 through 12.0.3, upgrade to at least version 12.0.4 to resolve the issue. If you are unable to upgrade in a timely fashion, consider applying a patch to fix the vulnerability. As a temporary workaround, consider restricting access to the budgets module for users with the "Edit budgets" permission until a patch is applied. Avoid using the `reassign to id` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** jsuites versions prior to 4.9.11 **Description** The issue allows for cross-site scripting (XSS) attacks via clipboard content. If a user can be tricked into copying malicious content and pasting it into the HTML editor, a part of the clipboard content is directly written to `innerHTML`, causing XSS. This enables JavaScript injection. **Recommendations** For versions prior to 4.9.11, update to version 4.9.11 to resolve the issue. As a temporary workaround, consider restricting the use of the HTML editor until the update is applied. Avoid pasting arbitrary content from untrusted sources into the HTML editor to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** @github/paste-markdown versions prior to 0.3.4 **Description** A self Cross-Site Scripting issue exists in the @github/paste-markdown library. If the clipboard data contains the string `<table>`, a div is dynamically created, and the clipboard content is copied into its innerHTML property without any sanitization, resulting in improper execution of JavaScript in the browser of the victim. Users directed to copy text from a malicious website and paste it into pages that utilize this library are affected. **Recommendations** For versions prior to 0.3.4, update to version 0.3.4 to resolve the issue. As a temporary workaround, consider implementing a Content Security Policy that prevents unsafe-inline to reduce the likelihood of this issue being exploited in modern browsers.

**Name of the Vulnerable Software and Affected Versions** Discourse versions prior to 2.7.8 **Description** The issue affects Discourse, an open source discussion platform, where rendering of d-popover tooltips can be susceptible to XSS attacks in versions prior to 2.7.8. This vulnerability only affects sites that have modified or disabled Discourse's default Content Security Policy. **Recommendations** For versions prior to 2.7.8, update to the latest stable version 2.7.8 to resolve the issue. As a temporary workaround, ensure that the Content Security Policy is enabled and has not been modified in a way that would make it more vulnerable to XSS attacks.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 90.0.4430.72 **Description** The issue is related to an inappropriate implementation in the Network component of Google Chrome, allowing a remote attacker to potentially access local UDP ports via a crafted HTML page. This could lead to unauthorized access to protected information. The vulnerability is also related to a security check flaw for standard elements in the browser's Network panel, which can be exploited by a remote attacker using a specially crafted web page. **Recommendations** For Google Chrome versions prior to 90.0.4430.72, update to version 90.0.4430.72 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages that could exploit the vulnerability in the Network component.