Wsparks-Vc

A NULL pointer dereference occurs when evicting the sole MSRP (Media Service Resource Protocol) attribute. A NULL pointer dereference is a software error where the program attempts to read from or write to a memory address that is NULL, typically leading to a system crash.

An out-of-bounds read occurs due to the use of an unvalidated MSRP attribute list length. This issue allows the system to read data beyond the intended buffer boundaries when processing the attribute list.

The issue involves an FTP passive data connection that is not bound to the authenticated control peer, which could allow an unauthorized party to intercept or hijack the data channel.

The login page contains a timing discrepancy that enables unauthenticated attackers to perform email enumeration. This allows an attacker to determine if a specific email address is registered to an account.

Filament applies Livewire's `WithFileUploads` trait to components where schemas may contain file upload fields. Certain schemas, such as the panel login form, do not require this functionality. This allows an unauthenticated attacker to upload arbitrary files to the application's temporary storage, which can be exploited to exhaust disk space or increase storage costs.

The `ImageColumn` and `ImageEntry` components render raw database values without escaping HTML. If the data passed to these components is not validated, an attacker can inject malicious HTML or JavaScript, leading to stored Cross-Site Scripting (XSS), which is a security flaw where a script is permanently stored on the target server and executed in the browser of users viewing the affected table or schema.