Gareth Heyes

**Name of the Vulnerable Software and Affected Versions** Joomla versions 3.4.6 through 5.1.2 **Description** Inadequate validation of URLs could result in an invalid check of whether a redirect URL is internal or not. This issue may allow obscure unsafe links. **Recommendations** For Joomla versions 3.4.6 through 5.1.2, upgrade to version 3.10.17-elts, 4.4.7, or 5.1.3 to stay secure.

**Name of the Vulnerable Software and Affected Versions** Joomla! (affected versions not specified) **Description** The issue is related to inadequate escaping of mail addresses, which leads to XSS vulnerabilities in various components. This could allow a remote attacker to execute arbitrary code by exploiting the vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 105.0.5195.52 Microsoft Edge (affected versions not specified) **Description** The issue is related to an incorrectly implemented security check for standard elements in the iframe sandbox of Microsoft Edge and Google Chrome browsers. This could allow a remote attacker to leak protected information. Specifically, in Google Chrome, an inappropriate implementation of the iframe sandbox allowed a remote attacker to leak cross-origin data via a crafted HTML page. **Recommendations** For Google Chrome versions prior to 105.0.5195.52, update to version 105.0.5195.52 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 102 **Description** The issue is related to errors in HTML sanitization. It could allow a remote attacker to execute arbitrary code if the attacker's input is sanitized via the HTML Sanitizer API and references a same-origin JavaScript file containing the script to be executed. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For versions prior to 102, update to version 102 or later to resolve the issue. As a temporary workaround, consider restricting the use of the HTML Sanitizer API until a patch is available. Avoid using the HTML Sanitizer API to sanitize attacker input that references same-origin JavaScript files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Midori Browser version 0.5.11 **Description** The issue arises from incorrect application of Content Security Policy (CSP) to multipart content sent with the multipart/x-mixed-replace MIME type. This could lead to script execution in areas where CSP should have blocked it, potentially allowing cross-site scripting (XSS) and other attacks when the product renders the content as HTML. The problem also involves consideration of the polyglot case, where a file can be both a valid image (e.g., GIF) and valid JavaScript. **Recommendations** For Midori Browser version 0.5.11, consider updating to a version where this issue is resolved, as the current version does not correctly apply CSP to all parts of multipart content. As a temporary workaround, consider restricting the rendering of multipart content to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 70 Thunderbird versions prior to 68.2 Firefox ESR versions prior to 68.2 **Description** The issue arises from the incorrect handling of null bytes when processing HTML entities, leading to incorrect parsing by Firefox. This could result in HTML comment text being treated as HTML, potentially leading to cross-site scripting (XSS) in certain web applications. Additionally, it could allow HTML entities to be masked from filters, enabling the use of entities to hide actual characters of interest from filters. The vulnerability may allow a remote attacker to impact data integrity. **Recommendations** For Firefox versions prior to 70, update to version 70 or later. For Thunderbird versions prior to 68.2, update to version 68.2 or later. For Firefox ESR versions prior to 68.2, update to version 68.2 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (affected versions not specified) **Description** A spoofing issue exists due to Microsoft Edge's improper handling of specific HTML content. This could allow an attacker to trick a user into believing they are on a legitimate website. The attacker's specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.2.1 Safari versions prior to 10.0.3 tvOS versions prior to 10.1.1 **Description** The issue involves the WebKit component and allows remote attackers to bypass the Same Origin Policy. This enables attackers to obtain sensitive information via a crafted web site. The problem is related to the ability of attackers to manipulate a website and exploit this vulnerability. **Recommendations** For iOS versions prior to 10.2.1, update to version 10.2.1 or later to resolve the issue. For Safari versions prior to 10.0.3, update to version 10.0.3 or later to resolve the issue. For tvOS versions prior to 10.1.1, update to version 10.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebKit component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to memory handling errors, allowing remote attackers to execute arbitrary code or cause a denial of service by accessing a specially crafted website. This could corrupt memory, enabling an attacker to execute code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 9.0.246.0 Adobe Flash Player versions 10.x prior to 10.0.32.18 Adobe AIR versions prior to 1.5.2 Description: The issue allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a local sandbox vulnerability. Recommendations: For Adobe Flash Player versions prior to 9.0.246.0, update to version 9.0.246.0 or later. For Adobe Flash Player versions 10.x prior to 10.0.32.18, update to version 10.0.32.18 or later. For Adobe AIR versions prior to 1.5.2, update to version 1.5.2 or later.

**Name of the Vulnerable Software and Affected Versions** Apple Safari for Windows versions 3.0.3 and earlier **Description** The issue allows remote attackers to bypass the Same Origin Policy, enabling access from local zones to external domains. This is achieved via a certain `body.innerHTML` property value, which facilitates a classic JavaScript frame hijacking attack. **Recommendations** For Apple Safari for Windows versions 3.0.3 and earlier, update to a version later than 3.0.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple Safari version 2.0.4 **Description** A cross-domain issue allows remote attackers to access restricted information from other domains via Javascript. This can be achieved through a js script that accesses the location information of cross-domain web pages, possibly involving `setTimeout` and timed events. **Recommendations** For Apple Safari version 2.0.4, consider disabling Javascript execution for cross-domain requests as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.