Syphonetic

**Name of the Vulnerable Software and Affected Versions** Agent Protocol server commit e9a89f **Description** An issue in the '/store/items/search' endpoint allows attackers to cause a Denial of Service (DoS), which is a condition where a service becomes unavailable to its intended users, by sending a crafted POST request. **Recommendations** As a temporary workaround, restrict access to the '/store/items/search' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** leonvanzyl autocoder commit 79d02a **Description** A path traversal vulnerability in the UI/static component allows attackers to read arbitrary files by sending a crafted URL path containing traversal sequences. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** leonvanzyl autocoder commit 79d02a **Description** A remote code execution (RCE) issue exists in the '/devserver/start' endpoint. This allows attackers to execute arbitrary code by providing a crafted `command` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** hunvreus DevPush version 0.3.2 **Description** An open redirect exists in the '/api/google/authorize' endpoint, which allows attackers to redirect users to malicious sites by supplying a crafted URL. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/api/google/authorize' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** CTFd versions prior to 3.8.2 **Description** A zip slip issue exists in the Admin import functionality. This allows attackers to write arbitrary files outside of the intended directories by supplying a crafted import file. The vulnerability affects the backup import functionality. **Recommendations** Update to version 3.8.2 or later.

**Name of the Vulnerable Software and Affected Versions** EPyT-Flow versions prior to 0.16.1 **Description** EPyT-Flow is a Python package used for generating hydraulic and water quality scenario data for water distribution networks. The REST API parses attacker-controlled JSON request bodies using a custom deserializer, `my load from json`, which supports a ` type ` field. When this field is present, the deserializer dynamically imports and instantiates a module/class specified by the attacker, with arguments also supplied by the attacker. This allows the invocation of dangerous classes like `subprocess.Popen`, potentially leading to operating system command execution during JSON parsing. This issue also affects the loading of JSON files. The ` type ` field is used in the deserialization process. **Recommendations** Versions prior to 0.16.1 should be updated to version 0.16.1. Do not load JSON data from untrusted sources. Do not expose the REST API.