J0Hndo

**Name of the Vulnerable Software and Affected Versions** Apache Tomcat versions 11.0.0-M1 through 11.0.22 Apache Tomcat versions 10.1.0-M1 through 10.1.55 Apache Tomcat versions 9.0.0.M1 through 9.0.118 Apache Tomcat versions 8.5.0 through 8.5.100 Apache Tomcat versions 7.0.0 through 7.0.109 **Description** An improper authorization issue exists where security constraints defined for the default servlet ignore any configured method or method omission. This allows requests to bypass intended security restrictions when they are applied to the default servlet. **Recommendations** Upgrade to version 11.0.23 Upgrade to version 10.1.56 Upgrade to version 9.0.119

**Name of the Vulnerable Software and Affected Versions** Authelia versions 4.36.0 through 4.39.19 **Description** Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO). A lack of domain canonicalization in specific edge cases can allow an access control rule to be skipped. This occurs when the target resource uses forwarded authorization integration, the requested domain has two additional segments compared to the session domain, and there are two separate rules with inexact domain matches (such as wildcards, username, or group matches) ordered from most specific to least specific, where the second rule is more permissive. Exploitation requires the attacker to request a URL for the more specific domain where the second segment contains capitalized letters, provided the Envoy ExtAuthz integration is not used and the proxy does not canonicalize the requested host name in the header before sending it to the authorization endpoint. **Recommendations** Upgrade to 4.39.20.

**Name of the Vulnerable Software and Affected Versions** Apache MINA SSHD versions prior to 2.18.0 Apache MINA SSHD versions 3.0.0-M1 through 3.0.0-M3 **Description** A path traversal issue exists in the `org.apache.sshd:sshd-git` bundle. Due to insufficient path validation in `git-upload-pack`, `git-receive-pack`, and other git operations, users authenticated via SSH can access git repositories located outside the configured git server root directory. Path traversal is a vulnerability that allows an attacker to access files or directories that are stored outside the web root folder by manipulating variables such as file paths. **Recommendations** Upgrade to Apache MINA SSHD version 2.18.0. Upgrade to Apache MINA SSHD version 3.0.0-M4. Implement additional security controls to govern access to git repositories and allowed operations instead of relying solely on file system layout and permissions.