Ycam

Name of the Vulnerable Software and Affected Versions: Jirafeau (affected versions not specified) Description: The issue concerns a MIME Type Bypass Cross-Site Scripting vulnerability in Jirafeau. Normally, Jirafeau prevents browser preview for text files to prevent potential cross-site scripting exploits, especially for files like SVG and HTML documents. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Stormshield Network Security (SNS) versions 3.7.0 through 3.7.41 Stormshield Network Security (SNS) versions 3.10.0 through 3.11.29 Stormshield Network Security (SNS) versions 4.0 through 4.3.24 Stormshield Network Security (SNS) versions 4.4.0 through 4.7.4 **Description** A user with write access to the email alerts page in Stormshield Network Security (SNS) can create an alert email containing malicious JavaScript. This malicious JavaScript is executed by the template preview. **Recommendations** For versions 3.7.0 through 3.7.41, update to version 3.7.42 to resolve the issue. For versions 3.10.0 through 3.11.29, update to version 3.11.30 to resolve the issue. For versions 4.0 through 4.3.24, update to version 4.3.25 to resolve the issue. For versions 4.4.0 through 4.7.4, update to version 4.7.5 to resolve the issue.