Scgajge12

**Nome do Software Vulnerável e Versões Afetadas** e107 versões anteriores a 2.3.4 **Description** e107 é um sistema de gerenciamento de conteúdo (CMS) que contém um Server-Side Request Forgery (SSRF) no buscador de arquivos remotos. Este problema permite o acesso ao ambiente local ao especificar uma URL do ambiente local no campo "Image/File URL:" da opção "From a remote location" no "Media Manager" na tela do administrador. SSRF é uma falha que permite que um invasor induza a aplicação do lado do servidor a fazer requisições para um local não pretendido. **Recommendations** Atualizar para a versão 2.3.4.

**Name of the Vulnerable Software and Affected Versions** Strapi versions prior to 4.12.1 **Description** The issue concerns Strapi, an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the login function of Strapi's admin screen, but it is possible to circumvent it. This increases the possibility of unauthorized login by login brute force attack. The vulnerability can be exploited by manipulating the request path, such as changing the case of the path or adding a trailing slash. For example, an attacker can use the `/admin/login` endpoint and then modify it to `/admin/Login` or `/admin/login/` to bypass the rate limit. **Recommendations** For versions prior to 4.12.1, update to version 4.12.1 to fix the issue. As a temporary workaround, consider modifying the rate limiting mechanism to forcibly convert the request path to upper or lower case and remove any extra slashes, as suggested in the measures section of the OSV description. This can help prevent the bypass of the rate limit.

**Name of the Vulnerable Software and Affected Versions** Piwigo versions prior to 13.8.0 **Description** Piwigo is open source photo gallery software. There is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header `User-Agent` is vulnerable at the endpoint that records user information when logging in to the administrator screen. It is possible to execute arbitrary SQL statements. Someone who wants to exploit the vulnerability must be logged in to the administrator screen, even with low privileges. Any SQL statement can be executed, which may leak information from the database. **Recommendations** For versions prior to 13.8.0, update to version 13.8.0 to resolve the issue. As a temporary workaround, consider escaping the parameter contents appropriately for those who want to execute a SQL statement verbatim with user-enterable parameters.

**Name of the Vulnerable Software and Affected Versions** Grav versions prior to 1.7.42 **Description** The issue allows for server-side template injection, which can lead to remote code execution. This can be achieved by embedding malicious PHP code on the administrator screen by a user with page editing privileges. The vulnerability exploits the `system` function in the Twig template engine, allowing an attacker to execute arbitrary system commands. **Recommendations** For Grav versions prior to 1.7.42, update to version 1.7.42 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrator screen and the edit functionality for users with page editing privileges until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** @keystone-6/auth versions 7.0.0 and prior **Description** Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. **Recommendations** To mitigate this issue, apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.

**Nome do software vulnerável e versões afetadas** Versões do rosariosis anteriores à 8.9.3 **Descrição** O problema está relacionado a Cross-site Scripting (XSS) – Stored, que ocorre quando um aplicativo armazena entradas do usuário sem a devida validação, permitindo que um invasor injete scripts maliciosos. Isso pode levar a ações não autorizadas em nome do usuário. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado. Não há informações sobre incidentes reais em que essa vulnerabilidade tenha sido explorada. **Recomendações** Para versões anteriores à 8.9.3, atualize para a versão 8.9.3 ou posterior para resolver o problema. Como solução temporária, considere restringir as entradas do usuário para minimizar o risco de exploração.