Lei Zhang

**Name of the Vulnerable Software and Affected Versions** Apache Kylin versions 4 through 5.0.3 **Description** Improper authorization occurs during job information retrieval, allowing an attacker to gain access to unauthorized jobs belonging to other projects. **Recommendations** Upgrade to version 5.0.4.

**Name of the Vulnerable Software and Affected Versions** Erick xmall versions 1.1 and earlier **Description** An issue in Erick xmall allows a remote attacker to escalate privileges via the `updateAddress` method of the `Address Controller` class. **Recommendations** For Erick xmall versions 1.1 and earlier, consider disabling the `updateAddress` method of the `Address Controller` class as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the `jobLogId` parameter. **Recommendations** For RUoYi version 4.8.0, avoid using the `jobLogId` parameter until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges. This is achieved via the `selectDeptTree` method of the "/selectDeptTree/{deptId}" endpoint, which does not properly validate the `deptId` parameter. **Recommendations** For RUoYi version 4.8.0, as a temporary workaround, consider restricting access to the `/selectDeptTree/{deptId}` endpoint until a patch is available. Additionally, avoid using the `deptId` parameter in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the `editSave` method in the "/tool/gen/editSave" API endpoint. **Recommendations** For RUoYi version 4.8.0, as a temporary workaround, consider disabling the `editSave` method in the "/tool/gen/editSave" API endpoint until a patch is available. Restrict access to the "/tool/gen/editSave" endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the "API Endpoint: /editSave" method in `SysNoticeController`. **Recommendations** For RUoYi version 4.8.0, consider disabling the `/editSave` method in `SysNoticeController` as a temporary workaround until a patch is available. Restrict access to the `SysNoticeController` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the SysDictTypeController component. **Recommendations** For RUoYi version 4.8.0, consider disabling access to the SysDictTypeController component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the `postID` parameter in the `edit` method. **Recommendations** For RUoYi version 4.8.0, avoid using the `postID` parameter in the affected edit method until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the `jobId` parameter. **Recommendations** For RUoYi version 4.8.0, avoid using the `jobId` parameter in affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the `editSave` method, which does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings. **Recommendations** For RUoYi version 4.8.0, as a temporary workaround, consider disabling the `editSave` method until a patch is available. Restrict access to system configuration settings to minimize the risk of exploitation. Avoid using the `editSave` method for modifications to system configuration settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the `changeStatus` method. **Recommendations** For RUoYi version 4.8.0, consider disabling the `changeStatus` method until a patch is available.

**Name of the Vulnerable Software and Affected Versions** RUoYi version 4.8.0 **Description** The issue allows a remote attacker to escalate privileges via the edit method of the "/edit/{dictId}" endpoint, which does not properly validate whether the requesting user has permission to modify the specified `dictId`. **Recommendations** For RUoYi version 4.8.0, as a temporary workaround, consider restricting access to the "/edit/{dictId}" endpoint until a patch is available. Avoid using the `dictId` variable in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apache Dubbo versions 3.1.0 through 3.1.10 Apache Dubbo versions 3.2.0 through 3.2.4 **Description** A deserialization vulnerability exists when decoding a malicious package, which can allow a remote attacker to execute arbitrary code or cause a denial of service. The issue is related to shortcomings in the deserialization mechanism of the Apache Dubbo RPC framework. **Recommendations** For Apache Dubbo versions 3.1.0 through 3.1.10, upgrade to the latest version to fix the issue. For Apache Dubbo versions 3.2.0 through 3.2.4, upgrade to the latest version to fix the issue. As a temporary workaround, consider restricting the decoding of packages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SOFARPC versions prior to 5.11.0 **Description** SOFARPC is a Java RPC framework. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. The default configuration of the SOFARPC framework uses a blacklist to filter out dangerous classes during the deserialization process. However, the blacklist is not comprehensive, allowing an actor to exploit certain native JDK classes and common third-party packages to construct gadget chains capable of achieving JNDI injection or system command execution attacks. **Recommendations** For versions prior to 5.11.0, update to version 5.11.0 to resolve the issue. As a temporary workaround, users can add `-Drpc serialize blacklist override=javax.sound.sampled.AudioFileFormat` to the blacklist.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 44.0.2403.89 Opera (affected versions not specified) **Description** The issue is related to an integer overflow in the `CJBig2 Image::expand` function, which can cause a heap-based buffer overflow. This allows remote attackers to cause a denial of service or possibly have other unspecified impacts by manipulating input data, such as using large height and stride values. The `CJBig2 Image::expand` function is located in `fxcodec/jbig2/JBig2 Image.cpp` in PDFium. **Recommendations** For Google Chrome versions prior to 44.0.2403.89, update to version 44.0.2403.89 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WebKit, as used in Apple iOS versions prior to 5.1 WebKit, as used in Apple iTunes versions prior to 10.6 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple iOS versions prior to 5.1, update to version 5.1 or later. For Apple iTunes versions prior to 10.6, update to version 10.6 or later.