Johannes Moritz

The issue allows remote attackers to inject arbitrary web script in the browser of a victim via crafted uploaded file names. This is a cross-site scripting (XSS) issue.

There is an argument injection issue in the xfce4-mime-helper from the xfce4-settings package. This issue allows for argument injection, which can potentially be exploited.

The JSPUI resumable upload implementations in SubmissionController and FileUploadRequest are vulnerable to multiple path traversal attacks, allowing an attacker to create files/directories anywhere on the server writable by the Tomcat/DSpace user, by modifying some request parameters during submission. This path traversal can only be executed by a user with special privileges (submitter rights). This vulnerability only impacts the JSPUI. The user must first have submitter privileges to at least one Collection and be able to determine how to modify the request parameters to exploit the vulnerability.

The JSPUI controlled vocabulary servlet in DSpace is vulnerable to an open redirect attack. An attacker can craft a malicious URL that looks like a legitimate DSpace/repository URL, which redirects the target to a site of the attacker's choice when clicked. This issue does not impact the XMLUI or 7.x versions.

The ItemImportServiceImpl in DSpace is vulnerable to a path traversal vulnerability, allowing a malicious SAF package to create files or directories anywhere the Tomcat/DSpace user can write to on the server. This vulnerability is only possible by a user with special privileges, such as Administrators or those with command-line access to the server. It impacts the XMLUI, JSPUI, and command-line. Users can block access to specific URL paths as a basic workaround: `/admin/batchimport` for XMLUI and `/dspace-admin/batchimport` for JSPUI, considering the site's path usage.

Name of the Vulnerable Software and Affected Versions: Tapestry version 5.4.1 Description: The issue affects Tapestry, with general information about the problem available. No estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited are provided. Recommendations: For Tapestry version 5.4.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

A remote code execution risk was identified in the Shibboleth authentication plugin of Moodle. The issue is related to incorrect code generation management. An attacker can exploit this issue by sending a specially crafted request, allowing them to execute arbitrary code remotely.

The issue allows for intentional remote code execution when importing legacy 'drag and drop into text' (ddwtos) type quiz questions. This could lead to the injection and execution of PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.