Rokkam Vamshi

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** Content injected into PDF rendering contexts may include HTML content such as `<img>` tags. When the `src` attribute of these images points to a URL, the PDF rendering engine downloads the image, which can leak information about the rendering server and potentially create a Server-Side Request Forgery (SSRF) vector—a technique where an attacker induces the server to make requests to an unintended location—within the local network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mattermost (affected versions not specified) **Description** Incorrect permission checks during the room creation process allow attackers to create room types that they are not authorized to create, leading to privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** Untrusted user data is passed verbatim to Excel exports for administrators. This allows formula injection, a technique where an attacker inserts malicious formulas into a spreadsheet, which can be used to compromise the environment of the user loading the file or access other data within the file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.