Lei Zhang

An issue exists that allows an unauthorized actor to perform a job discard. This primarily impacts services directly exposed to public networks, while in-house deployments are generally not affected.

Improper authorization occurs during job information retrieval, allowing an attacker to gain access to unauthorized jobs belonging to other projects.

An issue in Erick xmall allows a remote attacker to escalate privileges via the `updateAddress` method of the `Address Controller` class.

The issue allows a remote attacker to escalate privileges via the `editSave` method, which does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings.

The issue allows a remote attacker to escalate privileges via the `changeStatus` method.

The issue allows a remote attacker to escalate privileges via the `jobLogId` parameter.

The issue allows a remote attacker to escalate privileges via the `postID` parameter in the `edit` method.

The issue allows a remote attacker to escalate privileges via the `jobId` parameter.

The issue allows a remote attacker to escalate privileges. This is achieved via the `selectDeptTree` method of the "/selectDeptTree/{deptId}" endpoint, which does not properly validate the `deptId` parameter.

The issue allows a remote attacker to escalate privileges via the `editSave` method in the "/tool/gen/editSave" API endpoint.

The issue allows a remote attacker to escalate privileges via the "API Endpoint: /editSave" method in `SysNoticeController`.

The issue allows a remote attacker to escalate privileges via the SysDictTypeController component.

The issue allows a remote attacker to escalate privileges via the edit method of the "/edit/{dictId}" endpoint, which does not properly validate whether the requesting user has permission to modify the specified `dictId`.

A deserialization vulnerability exists when decoding a malicious package, which can allow a remote attacker to execute arbitrary code or cause a denial of service. The issue is related to shortcomings in the deserialization mechanism of the Apache Dubbo RPC framework.

SOFARPC is a Java RPC framework. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. The default configuration of the SOFARPC framework uses a blacklist to filter out dangerous classes during the deserialization process. However, the blacklist is not comprehensive, allowing an actor to exploit certain native JDK classes and common third-party packages to construct gadget chains capable of achieving JNDI injection or system command execution attacks.

The issue is related to an integer overflow in the `CJBig2 Image::expand` function, which can cause a heap-based buffer overflow. This allows remote attackers to cause a denial of service or possibly have other unspecified impacts by manipulating input data, such as using large height and stride values. The `CJBig2 Image::expand` function is located in `fxcodec/jbig2/JBig2 Image.cpp` in PDFium.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.