Gabdevele

**Nome do Software Vulnerável e Versões Afetadas** usememos Memos versão 0.26.0 **Description** Uma falha de Cross Site Scripting (XSS) permite que um atacante remoto obtenha informações sensíveis. O problema reside nas páginas SANITIZE SCHEMA, no Memo Rendering Component e nas páginas de Visualização de Memos Públicos/Privados. **Recommendations** No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Seafile versions prior to 13.0.17 Seafile versions prior to 13.0.17-pro Seafile versions prior to 12.0.20-pro Seafile versions 13.0.15 through 13.0.16-pro Seafile versions 12.0.14 and earlier **Description** The application does not properly sanitize WebSocket messages related to document structure updates within the Seadoc (sdoc) editor. This allows authenticated remote attackers to inject malicious JavaScript payloads through the `src` attribute of embedded Excalidraw whiteboards or the `href` attribute of anchor tags. **Recommendations** Update to Seafile version 13.0.17. Update to Seafile version 13.0.17-pro. Update to Seafile version 12.0.20-pro.

**Name of the Vulnerable Software and Affected Versions** AFFiNE versions prior to 0.26.0 **Description** AFFiNE, an open-source workspace and operating system, contains an Open Redirect flaw in the `/redirect-proxy` endpoint. The issue stems from a flawed domain validation process, where a Regular Expression lacking proper anchoring allows attackers to circumvent the domain whitelist by utilizing malicious domains that conclude with a trusted string. **Recommendations** Update to version 0.26.0 or later.