Rmb122

**Name of the Vulnerable Software and Affected Versions** Gitea version 1.26.2 **Description** The `/api/v1/teams/{id}` API routes fail to correctly enforce the `public-only` access token restriction. A `public-only` token is designed to limit API access to public repositories and organizations; however, these routes may return private team repository metadata and private team activity feed entries. This occurs because the `checkTokenPublicOnly` middleware fails to verify organization visibility when `ctx.Org.Organization` is nil. Additionally, team repository handlers do not apply repository-level filtering via `ctx.TokenCanAccessRepo(repo)`, and the team activity feed handler fails to apply `opts.ApplyPublicOnly(ctx.PublicOnly)` while having `IncludePrivate` set to true. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nagios Network Analyzer versions prior to 2024R2.0.1 **Description** Nagios Network Analyzer contains a flaw in how it handles LDAP certificate management. Specifically, the certificate removal process does not properly sanitize input. An authenticated administrator can exploit this to execute commands on the host system, with the privileges of the web application service, leading to remote code execution. **Recommendations** Update to version 2024R2.0.1 or later.

**Name of the Vulnerable Software and Affected Versions** OWASP Coraza WAF versions prior to 3.0.1 **Description** The issue is caused by the misuse of `log.Fatalf` in the OWASP Coraza WAF library, which leads to the application crashing after receiving crafted requests from attackers. The application will immediately crash after receiving a malicious request that triggers an error in `mime.ParseMediaType`. **Recommendations** For versions prior to 3.0.1, update to version 3.0.1 to resolve the issue. As a temporary workaround, consider modifying the error handling in the `mime.ParseMediaType` function to return directly instead of using `log.Fatalf`, which calls `os.Exit` and causes the application to crash.

**Name of the Vulnerable Software and Affected Versions** GateOne version 1.1 **Description** The issue allows arbitrary file download without authentication via "/downloads/.." directory traversal because `os.path.join` is misused. This can be exploited through the "/downloads/" API endpoint. **Recommendations** For GateOne version 1.1, as a temporary workaround, consider restricting access to the "/downloads/" API endpoint until a patch is available. Avoid using the `os.path.join` function in a way that allows directory traversal until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.