Ek1Ng

**Name of the Vulnerable Software and Affected Versions** Apache Answer versions through 1.2.0 **Description** The issue is related to a 'Race Condition' vulnerability due to improper synchronization when using shared resources. Normally, a user can only bookmark a question once, increasing the bookmark count by one. However, through repeated submissions using scripts, the number of question collections can be increased multiple times. **Recommendations** For versions through 1.2.0, upgrade to version 1.2.1, which fixes the issue. As a temporary workaround, consider restricting the ability to submit bookmarks repeatedly to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Kiwi TCMS versions prior to 12.3 **Description** The issue arises from insufficient upload validation checks in Kiwi TCMS, allowing an attacker to upload potentially dangerous files. These files can be combined to circumvent the existing Content-Security-Policy, enabling the execution of arbitrary JavaScript in the browser. **Recommendations** For versions prior to 12.3, update to version 12.3 to resolve the issue. As a temporary workaround, consider implementing a custom Django middleware, such as `ExtraHeadersMiddleware`, to force the `Content-Type: text/plain` header when serving uploaded files. Alternatively, force the `Content-Type` header via Nginx overrides, specifically for the `/uploads/` location.