Galaxynx

A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

**Name of the Vulnerable Software and Affected Versions** jofpin trape version 2.0 **Description** A race condition exists in the Telemetry Endpoint component within the `core/user.py` file. This issue occurs when the `vId` argument is manipulated, allowing for remote execution. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jofpin trape version 2.0 **Description** An authorization bypass exists in the `core/user.py` file. This issue occurs when the `vId`/`id` argument is manipulated, allowing for remote exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jofpin trape versions 1.0.0 through 2.0 **Description** A security flaw in the Admin Endpoint component allows remote attackers to bypass authentication. The issue resides in the `join room()` function within the `core/sockets.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `join room()` function in the `core/sockets.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Baserow versions prior to 2.3.3 **Description** An issue in the 2FA Verify Endpoint allows for improper authentication via remote manipulation. The flaw exists within the `verify()` function located in the `backend/src/baserow/api/two factor auth/views.py` file. This attack is characterized by high complexity and is difficult to exploit. **Recommendations** Upgrade to version 2.3.3.

**Name of the Vulnerable Software and Affected Versions** Baserow versions prior to 2.3.3 **Description** An issue in the Inactive Non-Staff User Handler component allows for improper authorization through the manipulation of the `BaserowImpersonateAuthTokenSerializer()` function located in the `backend/src/baserow/api/admin/users/serializers.py` file. This flaw enables remote exploitation, although the attack complexity is high and exploitation is considered difficult. The project maintainer has noted that while a token may be issued for a deactivated user, the endpoints may not actually function, suggesting the issue may behave more like a bug than a security flaw. **Recommendations** Update to version 2.3.3.

**Name of the Vulnerable Software and Affected Versions** Ehco1996 django-sspanel versions prior to 2023.12.26 **Description** A weakness in the Support Ticket Handler component allows for a remote authorization bypass. This issue occurs within the `TicketDetailView()` function located in the `apps/sspanel/views.py` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `TicketDetailView()` function.

**Name of the Vulnerable Software and Affected Versions** django-jet versions prior to 1.0.9 **Description** A missing authorization flaw exists in the OAuth Credential Revoke Handler component. This issue allows a remote attacker to perform a manipulation that bypasses authorization requirements. **Recommendations** Update to a version newer than 1.0.8. Restrict access to the OAuth Credential Revoke Handler component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** django-jet versions prior to 1.0.9 **Description** An authorization bypass exists in the Dashboard Module within the file `jet/dashboard/views.py`. This flaw allows a remote attacker to bypass authorization mechanisms. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** guohongze adminset versions prior to 0.62 **Description** An authorization bypass exists in the Delivery Deployment Endpoint within the `delivery/deli.py` file. A remote attacker can bypass authorization by manipulating the `project id` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `project id` argument in the `delivery/deli.py` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** django-jet versions prior to 1.0.9 **Description** A weakness in the OAuth Handler component allows a remote attacker to perform a cross-site request forgery (CSRF), which is an attack that forces an authenticated user to execute unwanted actions on a web application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** hunvreus devpush versions prior to 0.4.7 **Description** The Storage Reset Failure Handler component contains an issue within the `reset storage()` function located in the app/workers/tasks/storage.py file. This flaw involves the improper check or handling of exceptional conditions, which can be triggered through manipulation. The attack is characterized by high complexity and is considered difficult to exploit. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `reset storage()` function.

**Name of the Vulnerable Software and Affected Versions** django-blog-zinnia versions prior to 0.21 **Description** A security flaw in the Protected Entry Password Handler component, specifically within the `zinnia/views/mixins/entry protection.py` file, leads to the cleartext storage of sensitive information. This issue requires local access to be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.