Maverick-Vf142

A vulnerability was detected in BookStack up to 26.05.2. Affected by this issue is the function AttachmentController::getUpdateForm of the file app/Uploads/Controllers/AttachmentController.php of the component Attachment Edit Endpoint. The manipulation of the argument ID results in improper access controls. The attack may be launched remotely. The exploit is now public and may be used. The patch is identified as 4e406c41c4c8060a5795e74c66fb96362e54f400. It is advisable to implement a patch to correct this issue.

**Name of the Vulnerable Software and Affected Versions** Invoice Ninja versions prior to 5.13.27 **Description** An authorization bypass exists in the Vendor Portal Profile Update component within the `/vedor/profile/` file. A remote attacker can exploit this by manipulating the `vendor contact` argument. **Recommendations** Upgrade to version 5.13.27.

**Name of the Vulnerable Software and Affected Versions** Invoice Ninja versions prior to 5.13.27 **Description** An issue exists in the `Purify::isHostSafe()` function within the `app/Services/Pdf/Purify.php` file of the invoices endpoint. A remote attacker can manipulate the `notes` argument to perform server-side request forgery (SSRF), a technique where the server is coerced into making unauthorized requests to internal or external resources. **Recommendations** Update Invoice Ninja to version 5.13.27 or later. As a temporary mitigation, restrict or sanitize the input provided to the `notes` argument in the invoices endpoint.