Intrigus-Lgtm

**Name of the Vulnerable Software and Affected Versions** Eclipse JGit versions 7.2.0.202503040940-r and older **Description** The ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This can lead to information disclosure, denial of service, and other security issues. **Recommendations** For Eclipse JGit versions 7.2.0.202503040940-r and older, consider disabling the `ManifestParser` class and the `AmazonS3` class until a patch is available. Restrict access to the experimental amazons3 git transport protocol to minimize the risk of exploitation. Avoid using the affected classes for parsing XML files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 128.0.6613.84 **Description** The issue is related to an inappropriate implementation in V8, which can allow a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. This can be exploited to execute arbitrary code. The vulnerability is associated with a buffer overflow in memory due to incorrect representation of the shift amount in 64-bit BigInt shift optimizations. **Recommendations** For Google Chrome versions prior to 128.0.6613.84, update to version 128.0.6613.84 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** CodeQL CLI versions prior to 2.16.3 **Description** The CodeQL CLI is vulnerable to an XML External Entity attack due to an XML parser used to read auxiliary files. This vulnerability can be exploited when processing maliciously modified CodeQL databases or specially prepared QL query sources, potentially leading to a loss of privacy or exfiltration of secrets. Security researchers and QL authors who receive databases or QL source files from untrusted sources may be impacted. Those using CodeQL for routine analysis of source trees with a preselected set of trusted queries are not affected. **Recommendations** For versions prior to 2.16.3, upgrade to release 2.16.3 of the CodeQL CLI to fix the issue. As a temporary workaround, consider not accepting CodeQL databases or queries from untrusted sources. Alternatively, only process such material on a machine without an Internet connection. For customers using older releases of CodeQL for security scanning in an automated CI system and cannot upgrade for compliance reasons, continue using that version, but ensure the `codeql pack create` command is run using the production CodeQL release with trusted QL source.

**Name of the Vulnerable Software and Affected Versions** jsuites versions prior to 4.9.11 **Description** The issue allows for cross-site scripting (XSS) attacks via clipboard content. If a user can be tricked into copying malicious content and pasting it into the HTML editor, a part of the clipboard content is directly written to `innerHTML`, causing XSS. This enables JavaScript injection. **Recommendations** For versions prior to 4.9.11, update to version 4.9.11 to resolve the issue. As a temporary workaround, consider restricting the use of the HTML editor until the update is applied. Avoid pasting arbitrary content from untrusted sources into the HTML editor to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: SUSI.AI Server versions prior to d27ed0f Description: The issue is due to insufficient input validation, leading to a directory traversal vulnerability. This allows an attacker to retrieve any admin config and file readable by the app. Additionally, some files can be moved or deleted. Recommendations: For versions prior to d27ed0f, update to version d27ed0f or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** loklak versions less than or equal to commit 5f48476 **Description** The loklak server application contains a path traversal vulnerability due to insufficient input validation in the APIs. This allows a directory traversal vulnerability, enabling an attacker to retrieve any admin configuration and files readable by the app available on the hosted file system. Furthermore, user-controlled content could be written to any admin config and files readable by the application. **Recommendations** To resolve the issue, users will need to upgrade their hosted instances of loklak to a version greater than commit 5f48476, specifically to a version that includes the patch from commit 50dd692. As a temporary workaround, consider restricting access to sensitive admin configurations and files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Opencast versions prior to 7.9 Opencast versions prior to 8.9 **Description** The issue concerns Opencast's HTTP client, which disables HTTPS hostname verification for a large portion of its HTTP requests. Hostname verification is crucial when using HTTPS to ensure the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks. This problem is fixed in Opencast 7.9 and Opencast 8.9. After fixing the problem, Opencast will no longer accept self-signed certificates without properly importing them into the Java key store. **Recommendations** For Opencast versions prior to 7.9, update to Opencast 7.9 or later to fix the issue. For Opencast versions prior to 8.9, update to Opencast 8.9 or later to fix the issue. As a general mitigation measure, consider importing self-signed certificates into the Java key store or obtaining a valid certificate to ensure secure communication.

**Name of the Vulnerable Software and Affected Versions** CSS Validator versions prior to commit e5c09a9 **Description** The issue is related to a cross-site scripting vulnerability in handling URIs. It can be triggered when a user clicks on a specifically crafted validator link. **Recommendations** For versions prior to commit e5c09a9, update to a version that includes the patch from commit e5c09a9 to resolve the issue.