Nebusecurity

A use-after-free issue exists where an application may cause unexpected system termination or corrupt kernel memory. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A path traversal issue exists in the `bmx7-info` CGI script. This allows unauthenticated attackers to read files outside the configured `runtimeDir` by supplying directory traversal sequences in the query string, enabling access to sensitive files accessible to the CGI process.

An issue exists where the `cmt:` search term verifies if a comment is visible to the user but fails to verify if the commenter's identity should be hidden. Consequently, using a `cmt:USER` search can match a paper with a visible comment authored by a specific user, even if that comment is intended to be anonymous. This allows an authenticated user with search access to infer the author of an anonymous comment, which compromises reviewer anonymity. Comments that are not visible to the user continue to be excluded from search results.