Tonghuaroot

snipe-it versions before 8.7.0 contain a server-side request forgery vulnerability in the ExternalUrl validation rule that fails to detect IPv6 transition addresses encoding private IPv4 targets. Attackers with super-admin privileges can configure webhook URLs using NAT64, 6to4, or Teredo transition addresses to bypass SSRF guards and access internal services or cloud metadata endpoints.

**Name of the Vulnerable Software and Affected Versions** MCPHub versions prior to 1.0.32 **Description** An issue exists in the SSRF guard located in `src/utils/ssrf.ts` where the `isBlockedIpv6()` function fails to check IPv6 transition address families, specifically NAT64 (64:ff9b::/96), 6to4 (2002::/16), and Teredo (2001::/32). Server-Side Request Forgery (SSRF) is a technique where an attacker induces a server-side application to make requests to an unintended location. An attacker capable of specifying a URL for an MCP server connection can encode a private IPv4 address within these IPv6 forms to bypass the guard and access internal infrastructure. **Recommendations** Update to version 1.0.32.

**Name of the Vulnerable Software and Affected Versions** Spring Framework versions 7.0.0 through 7.0.8 Spring Framework versions 6.2.0 through 6.2.19 Spring Framework versions 6.1.0 through 6.1.28 Spring Framework versions 6.0.0 through 6.0.30 Spring Framework versions 5.3.0 through 5.3.49 Spring Framework versions prior to 5.2.25.RELEASE **Description** Use of `XsltView` in a Spring MVC application can lead to Server-Side Request Forgery (SSRF) and Remote Code Execution (RCE) if the application implements an `/**` mapping that triggers view rendering without an explicitly specified view name. **Recommendations** Update to a version newer than 7.0.8 Update to a version newer than 6.2.19 Update to a version newer than 6.1.28 Update to a version newer than 6.0.30 Update to a version newer than 5.3.49 Update to a version newer than 5.2.25.RELEASE

**Name of the Vulnerable Software and Affected Versions** AVideo versions prior to 24.0 **Description** An issue exists in the `isSSRFSafeURL()` function where it fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass protections via the LiveLinks proxy endpoint to access internal services and cloud metadata endpoints by encoding private IPv4 targets within these transition address formats. Server-Side Request Forgery (SSRF) is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** Update to version 24.0 or later. As a temporary mitigation, restrict access to the LiveLinks proxy endpoint.

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.11.0 through 3.17.0 **Description** An issue exists where the `attach-consumer-label` plugin fails to correctly sanitize certain input values. This allows an attacker to perform an authorization bypass or escalate privileges by providing untrusted inputs that influence security decisions. **Recommendations** Upgrade to version 3.18.0.

**Name of the Vulnerable Software and Affected Versions** Python (affected versions not specified) **Description** When decompressing crafted zip files using bzip, LZMA, or Zstandard compressions, the software may use an attacker-controlled size to pre-allocate memory, which can lead to memory exhaustion. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Ech0 before 5.0.1 does not impose any size or shape limit on the Accept-Language header processed by its i18n middleware, which runs on every HTTP request. The header is passed unfiltered to go-i18n's NewLocalizer, which internally calls golang.org/x/text/language.ParseAcceptLanguage. The CVE-2022-32149 mitigation in x/text caps '-' characters but not ' ' characters, which the parser aliases to '-', allowing quadratic-time parsing to be triggered with a large header (up to Go's default 1 MiB) built from underscore separators. An unauthenticated attacker can send such requests to consume roughly 1.5 seconds of CPU each, and concurrent requests can saturate a multi-core server (denial of service).

**Name of the Vulnerable Software and Affected Versions** Hi.Events versions prior to 1.11.1-beta **Description** An issue exists where webhook destinations are validated only during registration and not during use. The `NoInternalUrlRule` function in `backend/app/Validators/Rules/NoInternalUrlRule.php` uses `gethostbyname()` to reject private and reserved IP ranges, but public hostnames are permitted. During dispatch, the `WebhookDispatchService` utilizes the stored URL via `spatie/laravel-webhook-server` without re-validating the destination. Because `backend/config/webhook-server.php` does not configure Guzzle options, redirect following is enabled by default. This allows a destination to redirect the server to a loopback, private, or cloud metadata address, or allows an attacker to change a DNS record after registration to achieve the same result. The `WebhookResponseHandlerService` stores the response body in the webhook log, which is then exposed via the `WebhookLogResource` endpoint, allowing the requester to read responses from internal services. This affects both event and organizer webhooks. **Recommendations** Update Hi.Events to version 1.11.1-beta.

**Name of the Vulnerable Software and Affected Versions** @fastify/busboy versions prior to 3.2.2 **Description** This multipart form-data parser for Node.js fails to correctly handle lone carriage return or line feed characters in part headers, as it only splits lines on the two-byte carriage-return line-feed sequence. Consequently, these characters are passed verbatim into the parsed `Content-Disposition` filename and field name. An attacker can exploit this by uploading files with filenames or field names containing these characters to inject control characters into applications that trust the parser. This can lead to filesystem filename pollution, log forging, or header injection when the values are sent to a carriage-return-sensitive sink. **Recommendations** Upgrade to version 3.2.2. For consumers such as @fastify/multipart, update the @fastify/busboy dependency to version 3.2.2.

**Name of the Vulnerable Software and Affected Versions** Apache InLong versions 2.0.0 through 2.3.x **Description** An issue allows any user authenticated to the manager to create, modify, and delete Data Node definitions, leading to files or directories being accessible to external parties. **Recommendations** Upgrade to version 2.4.0.

**Name of the Vulnerable Software and Affected Versions** mcp/sdk versions 0.5.0 through 0.7.0 **Description** The HTTP client transport in the MCP PHP SDK reads a Server-Sent Events (SSE) response stream incrementally and appends data to an in-memory buffer `sseBuffer` without an upper bound. The buffer is only flushed when an SSE event delimiter (a double newline) is encountered. A malicious or compromised server can stream data without sending this delimiter, causing the buffer to grow indefinitely. This leads to memory exhaustion, triggering a fatal allocation error or an OS out-of-memory kill, resulting in a denial of service for the MCP client. This issue affects any client using `HttpTransport` against an untrusted server endpoint and requires no authentication or user interaction beyond initiating the connection. The vulnerability is located in the `processSSEStream()` function within the `HttpTransport` class. **Recommendations** Update mcp/sdk to version 0.7.1. As a temporary mitigation, restrict the use of `HttpTransport` when connecting to untrusted server endpoints.

**Name of the Vulnerable Software and Affected Versions** vulnerability-lookup (affected versions not specified) **Description** The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is global` to reject non-public addresses after DNS resolution. However, IPv6 transition addresses, such as NAT64 `64:ff9b::/96`, 6to4 `2002::/16`, and Teredo `2001:0000::/32`, are classified as globally routable by IANA. Consequently, `is global` returns `True` even if the embedded IPv4 targets a private, loopback, or cloud metadata destination. This allows an attacker to register a webhook pointing to a hostname that resolves to a transition address, bypassing the Server-Side Request Forgery (SSRF) guard to exfiltrate data to an internal endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apache Answer versions prior to 2.0.2 **Description** Improper Handling of Length Parameter Inconsistency allows unauthenticated attackers to cause a denial of service. This is achieved by sending a specially crafted `Accept-Language` header that triggers excessive CPU consumption during the parsing process. **Recommendations** Upgrade to version 2.0.2.

**Name of the Vulnerable Software and Affected Versions** Apache Answer versions prior to 2.0.2 **Description** An improper authorization issue exists where any authenticated user can reject arbitrary pending edit-revisions. This occurs because the system lacks an authorization check during the reject operation, allowing users to perform this action without the required review permissions. **Recommendations** Upgrade to version 2.0.2.

**Name of the Vulnerable Software and Affected Versions** Apache Answer versions prior to 2.0.2 **Description** Insufficient Verification of Data Authenticity in the external-login email binding flow. A missing authorization check allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confirmation link. **Recommendations** Upgrade to version 2.0.2.

**Name of the Vulnerable Software and Affected Versions** Apache Answer versions prior to 2.0.2 **Description** Improper input validation in the avatar-cleanup logic allows an authenticated user to delete files uploaded by other users. This occurs because the system fails to perform an ownership check when a file URL is supplied. **Recommendations** Upgrade to version 2.0.2.

**Name of the Vulnerable Software and Affected Versions** code.gitea.io/gitea versions 1.22.x through 1.26.x **Description** The Locale middleware, which processes every unauthenticated request, is susceptible to a Denial of Service (DoS) attack. The issue occurs when the middleware calls `language.ParseAcceptLanguage()` on the raw `Accept-Language` HTTP header without implementing size or shape filters. While a previous guard limits the number of `-` characters, it fails to account for ` ` characters, which the internal scanner aliases to `-` before parsing. An unauthenticated attacker can send a request with a large `Accept-Language` header (up to 1 MiB) containing numerous ` ` separators. This triggers quadratic-time behavior in the parser's internal scanner, causing significant CPU exhaustion. For example, a single request can consume approximately 2 seconds of server CPU, and a small number of concurrent attackers can saturate a multi-core server. **Recommendations** For code.gitea.io/gitea versions 1.22.x through 1.26.x, implement a size or character-class filter on the `Accept-Language` header before it is passed to the `language.ParseAcceptLanguage()` function to ensure the total count of `-` and ` ` characters does not exceed a reasonable limit (e.g., 32).

**Name of the Vulnerable Software and Affected Versions** AVideo versions prior to 29.1 **Description** An OS command injection issue exists in the `plugin/API/standAlone/functions.php` file. The `listFFmpegProcesses()` function interpolates unsanitized keyword parameters within single quotes without proper escaping. An attacker can provide a specially crafted encrypted `codeToExec` payload to break out of the single-quoted grep context, allowing the execution of arbitrary operating system commands with the privileges of the web-server user. **Recommendations** Update AVideo to a version later than 29.0. As a temporary mitigation, restrict access to the `listFFmpegProcesses()` function.

**Name of the Vulnerable Software and Affected Versions** AVideo versions prior to 29.0 **Description** An OS command injection issue exists in the 'ffmpeg.json.php' endpoint. The `notifyCode` and `callback` parameters are concatenated into a shell command without proper escaping. An attacker capable of crafting a valid encrypted payload can inject shell metacharacters into these fields to execute arbitrary operating system commands with the privileges of the web-server user. **Recommendations** Update to a version newer than 29.0. As a temporary mitigation, restrict access to the 'ffmpeg.json.php' endpoint or avoid using the `notifyCode` and `callback` parameters.

**Name of the Vulnerable Software and Affected Versions** BBOT (affected versions not specified) **Description** The unarchive module fails to detect symlinks in zip and 7z archives when the listing includes a DOS-attribute prefix before the unix mode, a characteristic of legacy p7zip versions. This allows an attacker to bypass security guards during a scan, such as through the `filedownload` process, resulting in an attacker-controlled symlink being written into the extraction directory. The impact is limited to the creation of the symlink, as the target is not written through. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.