Nicolas Chatelain

An issue exists in the `parseObjectResponse()` function that allows remote authenticated attackers to disclose sensitive information. The flaw is caused by the improper restriction of XML External Entity (XXE) references, which are references to external files or URLs within an XML document. This allows an attacker to retrieve data in the context of the service account.

Sensitive information is stored in plaintext within the handling of mailbox credentials. This flaw allows remote attackers to disclose sensitive information without requiring authentication. This issue can be used alongside other flaws to disclose stored credentials and further compromise the system.

A path traversal authentication bypass issue exists in Unraid’s authentication request process. This allows remote attackers to bypass authentication on affected systems without needing to authenticate. The flaw is located in the `auth-request.php` file and is due to insufficient validation of a user-supplied path before it is used during authentication. An attacker can exploit this to bypass authentication on the system.

A path traversal flaw exists in the Unraid update request handling mechanism. This issue could allow for remote code execution. The vulnerability is related to the handling of update requests, potentially allowing an attacker to traverse file paths and execute arbitrary code on the system.

The software contains a cross-site scripting issue that can lead to authentication bypass. The issue allows an attacker to bypass authentication mechanisms.

The issue allows partial or full memory access via attacker-controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard, which hosts the WiFi card on the device.

Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.56 Description: The issue is related to a lack of privilege management mechanism in the Sympa mailing list manager, which can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. Recommendations: For versions prior to 6.2.56, update to version 6.2.56 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and functionality to minimize the risk of exploitation.

The issue allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the `less` command. This is related to the restricted shell interface.

The issue allows remote attackers to gain root privileges by exploiting a metacharacter in the argument to the chroothole client executable. This is achieved by using a dollar sign ($) metacharacter.

The issue allows remote authenticated users to execute arbitrary PHP code. This can be achieved by uploading an HTML file with a crafted `INCLUDE` or `INCLURE` tag and then accessing it with a `valider xml` action.

A directory traversal issue exists, allowing remote attackers to enumerate system files via the `var url` parameter in a "valider xml" action.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `var url` parameter in a "valider xml" action.