Dangkhai

**Name of the Vulnerable Software and Affected Versions** Apache Druid versions 0.22.1 and earlier **Description** The issue allows execution of reflected XSS attacks due to unescaped URL parameters being sent back in HTML responses when certain specially-crafted links are used. **Recommendations** For Apache Druid versions 0.22.1 and earlier, update to version 0.23.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Joomla! versions 3.0.0 through 3.10.6 Joomla! versions 4.0.0 through 4.1.0 **Description** An issue was discovered where uploading a file with an excessively long name causes an error. This error results in the display of the web application's source code path. **Recommendations** For Joomla! versions 3.0.0 through 3.10.6, update to a version outside of this range to resolve the issue. For Joomla! versions 4.0.0 through 4.1.0, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent exploitation until a patch is available.

**Name of the Vulnerable Software and Affected Versions** parse-link-header versions prior to 2.0.0 **Description** The issue concerns a Regular Expression Denial of Service (ReDoS) that can be triggered via the `checkHeader` function. This can lead to a denial of service. **Recommendations** For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue. As a temporary workaround, consider disabling the `checkHeader` function until a patch is available.

Name of the Vulnerable Software and Affected Versions: Apache NiFi versions prior to 1.15.1 Description: The issue allows an authenticated user to configure an XSLT file in the TransformXML processor, which may include malicious external entity calls, potentially revealing sensitive information. Recommendations: For versions prior to 1.15.1, update to version 1.15.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the TransformXML processor to minimize the risk of exploitation.