George Chen

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.

CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers can enumerate all tasks in the system and delete arbitrary analyses by sending requests to task view and delete endpoints without ownership verification.

joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts proto as an error code. Attackers can supply proto keys in custom messages to replace the returned object's prototype, breaking downstream code relying on Object.prototype methods.

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components. Attackers can inject malicious markup like img elements with onerror handlers into descriptions via the metadata service or Elasticsearch, executing JavaScript in every user's browser that views search results.

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails to strip script tags from rich text. An Author-role user can store malicious script tags in rich text fields that execute in an Editor or Super Admin's session when the preview pane is expanded, enabling account takeover.

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and gain account access.

Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into authorized keys files. Attackers can inject malicious SSH key entries with option directives to gain persistent unauthorized access that survives key deletion and SSH access revocation.

Spug through 3.4.0 contains a remote code execution vulnerability in the ping check function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/run test/ endpoint to execute arbitrary commands as the Spug process user.

procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape sequences in their command line arguments, which are written unmodified to other users' terminals for interpretation by terminal emulators.

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to arbitrary locations.

**Name of the Vulnerable Software and Affected Versions** NetBox versions prior to 4.7.1 **Description** Authenticated users with view permissions can access private records of all users due to improper scoping of querysets. This issue affects the REST and GraphQL API endpoints for Notifications, Subscriptions, and Bookmarks, disclosing which users watch or bookmark specific objects. **Recommendations** Update NetBox to version 4.7.1 or later.

**Name of the Vulnerable Software and Affected Versions** AutoAgent (affected versions not specified) **Description** An unauthenticated remote code execution issue exists in the TCP server that binds to all interfaces. This allows an attacker to connect to the exposed communication port and execute arbitrary bash commands as root within the container, which can lead to unauthorized access to bind-mounted host workspace directories. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Plane versions prior to 1.4.3 **Description** Authenticated attackers can post comments to arbitrary issues across different workspaces. This occurs because the software fails to validate whether issues belong to the deploy board's project when using the public comment endpoint. The attack is executed by supplying a specific `issue id` parameter to the public deploy-board comment endpoint. **Recommendations** Update to version 1.4.3 or later. Restrict access to the public deploy-board comment endpoint to minimize the risk of unauthorized comment posting.

**Name of the Vulnerable Software and Affected Versions** NetBox versions prior to 4.7.1 **Description** NetBox fails to redact sensitive data source backend credentials in REST and GraphQL API responses. Authenticated users with only view permissions can retrieve plaintext passwords and secret keys for Git and Amazon S3 backends through API endpoints, potentially leading to unauthorized access to external repositories and storage buckets. **Recommendations** Update NetBox to version 4.7.1 or later.

**Name of the Vulnerable Software and Affected Versions** SQL Chat (affected versions not specified) **Description** Four unauthenticated API endpoints accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. This allows attackers to connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server network without authentication. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MindsDB versions prior to 26.1.1 **Description** A server-side request forgery (SSRF) issue exists in the web crawler handler. This allows unauthenticated attackers to fetch arbitrary URLs by providing caller-controlled URLs to the `CrawlerTable.list` function. By exploiting the default empty configuration, attackers can bypass allowlist controls to access internal services and cloud metadata endpoints without authentication. **Recommendations** Update MindsDB to version 26.1.1 or later.

**Name of the Vulnerable Software and Affected Versions** Pterodactyl Panel versions prior to 1.14.1 **Description** The software fails to validate action-specific permissions during the creation of scheduled tasks. This allows subusers who possess only the `schedule.update` permission to execute arbitrary console commands. An attacker can create and immediately trigger scheduled tasks to run game-server console commands, control the server power state, or create backups without the required authorization checks. **Recommendations** Update Pterodactyl Panel to version 1.14.1 or later.

**Name of the Vulnerable Software and Affected Versions** APITable versions prior to 1.13.0-beta.1 **Description** An incorrect authorization issue exists in the `NodePermissionGuard` component. The system fails to enforce node-level access control when permission lookups trigger exceptions. This allows attackers possessing valid Fusion API tokens to write attachments to private datasheets, even if they have been explicitly denied access, by triggering an unhandled exception within the permission guard. **Recommendations** Update to a version later than 1.13.0-beta.1.

**Name of the Vulnerable Software and Affected Versions** gonic versions prior to 0.22.0 **Description** Authenticated users can trigger media library rescans because the software fails to validate administrator privileges at the 'startScan' endpoint. By repeatedly calling this endpoint, an attacker can force CPU and I/O-intensive filesystem operations, leading to a denial of service on multi-user instances. **Recommendations** Update to version 0.22.0 or later. As a temporary workaround, restrict access to the 'startScan' endpoint to prevent unauthorized users from triggering rescans.

**Name of the Vulnerable Software and Affected Versions** Webstudio versions prior to 0.296.0 **Description** An unauthenticated server-side request forgery (SSRF) exists when the `RESIZE ORIGIN` environment variable is unset. This allows attackers to provide arbitrary URLs to the '/cgi/image', '/cgi/video', and '/cgi/asset' proxy endpoints to read cloud instance metadata, access internal services, and perform network reconnaissance on the instance infrastructure. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** Update to a version newer than 0.296.0. Set the `RESIZE ORIGIN` environment variable to restrict the proxy routes.