Xlabaiteam

**Nome do Software Vulnerável e Versões Afetadas** Versões do MindsDB anteriores à 25.9.1.1 **Descrição** O MindsDB, uma plataforma para construção de inteligência artificial a partir de dados corporativos, possui uma falha de path traversal em sua interface /api/files. Um atacante autenticado pode explorar essa vulnerabilidade para obter execução remota de comandos. A vulnerabilidade reside no módulo "Upload File", especificamente no endpoint da API /api/files. O sistema não realiza verificações de segurança nos caminhos dos arquivos enviados, permitindo que atacantes utilizem sequências `../` no nome do arquivo para realizar path traversal. A operação de escrita do arquivo ocorre antes da filtragem do nome do arquivo, possibilitando que conteúdo arbitrário seja gravado em qualquer local do servidor. Um atacante pode sobrescrever arquivos executáveis existentes, potencialmente obtendo Execução Remota de Código (RCE) ao sobrescrever arquivos como `/venv/lib/python3.10/site-packages/pip/ init .py` e acionar sua execução por meio de outras funcionalidades do MindsDB, como a instalação de handlers. **Recomendações** Atualize para a versão 25.9.1.1 ou posterior do MindsDB para corrigir esta vulnerabilidade.

**Nome do Software Vulnerável e Versões Afetadas** Versões do cryptography anteriores a 46.0.5 **Descrição** As funções `public key from numbers` (ou `EllipticCurvePublicNumbers.public key()`), `EllipticCurvePublicNumbers.public key()`, `load der public key()` e `load pem public key()` não validam se o ponto de chave pública fornecido pertence ao subgrupo de ordem prima esperado da curva. Essa validação ausente permite que um invasor forneça um ponto de chave pública `P` de um subgrupo de ordem pequena, potencialmente levando a problemas de segurança na verificação de assinaturas (ECDSA) e na negociação de chaves compartilhadas (ECDH). Ao usar ECDH, a chave privada da vítima módulo a ordem do subgrupo pequeno pode ser vazada. Para curvas com cofator maior que 1, os bits menos significativos da chave privada são revelados. A exploração deste problema com chaves públicas fracas no ECDSA permite a falsificação de assinaturas no subgrupo pequeno. Este problema afeta apenas as curvas SECT. **Recomendações** Atualize para a versão 46.0.5 ou posterior do cryptography.

**Name of the Vulnerable Software and Affected Versions** Alist versions prior to 3.57.0 **Description** Alist is a file list program that supports multiple storages, powered by Gin and Solidjs. The application contains a path traversal issue in multiple file operation handlers. An authenticated attacker can bypass directory-level authorization by injecting traversal sequences into filename components. This allows unauthorized file removal, movement, and copying across user boundaries within the same storage mount. The vulnerability affects file operations and potentially compromises data integrity and confidentiality. **Recommendations** Update to version 3.57.0 or later.

**Name of the Vulnerable Software and Affected Versions** Alist versions prior to 3.57.0 **Description** Alist, a file list program powered by Gin and Solidjs, has a configuration issue where TLS certificate verification is disabled by default for all outgoing storage driver communications. This allows for potential Man-in-the-Middle (MitM) attacks, enabling decryption, theft, and manipulation of data transmitted during storage operations. This compromises the confidentiality and integrity of user data. **Recommendations** Update to version 3.57.0 or later.

**Name of the Vulnerable Software and Affected Versions** OpenList Frontend versions prior to 4.1.10 **Description** The OpenList Frontend application contains a path traversal flaw in multiple file operation handlers within the `server/handles/fsmanage.go` file. The application directly concatenates filename components from the `req.Names` variable with validated directories using `stdpath.Join`, allowing attackers to bypass path restrictions using ".." sequences. This enables authenticated attackers to access files belonging to other users within the same storage mount and perform unauthorized actions, including deletion, renaming, and copying. The vulnerable functions include `FsRemove` and `FsCopy`. An attacker can exploit this by injecting traversal sequences into filename components. The vulnerability allows privilege escalation within shared storage environments. **Recommendations** Versions prior to 4.1.10: Upgrade to version 4.1.10 or later to resolve this issue.

**Name of the Vulnerable Software and Affected Versions** OpenList versions prior to 4.1.10 **Description** The OpenList application disables TLS certificate verification by default for all outgoing storage driver communications, creating a risk of Man-in-the-Middle (MitM) attacks. This allows attackers to intercept and manipulate all storage communications, potentially leading to the decryption, theft, and manipulation of data. Attackers can leverage network-level attacks, such as ARP spoofing or compromised network equipment, to redirect traffic to malicious endpoints. The `TlsInsecureSkipVerify` setting is set to true by default in the `DefaultConfig()` function. This enables attackers to establish encrypted connections with attacker-controlled servers, allowing full decryption and manipulation of storage operations without security warnings. A proof-of-concept demonstrated successful interception of authentication cookies by redirecting traffic to a malicious HTTPS server. **Recommendations** Versions prior to 4.1.10: Upgrade to version 4.1.10 or later to enable certificate verification and mitigate the risk of MitM attacks.

**Name of the Vulnerable Software and Affected Versions** sm-crypto versions prior to 0.3.14 **Description** sm-crypto, a JavaScript library providing implementations of Chinese cryptographic algorithms SM2, SM3, and SM4, contains a flaw in the SM2 decryption logic. An attacker can recover the private key by repeatedly interacting with the SM2 decryption interface, requiring approximately several hundred interactions. This issue could compromise confidentiality. **Recommendations** Versions prior to 0.3.14 should be updated to version 0.3.14 or later.

**Name of the Vulnerable Software and Affected Versions** sm-crypto versions prior to 0.4.0 **Description** sm-crypto provides JavaScript implementations of Chinese cryptographic algorithms SM2, SM3, and SM4. A flaw exists in the SM2 signature verification logic that allows an attacker to forge valid signatures for arbitrary public keys under default configurations. If the message space has sufficient redundancy, the attacker can adjust the message prefix to meet specific formatting needs. **Recommendations** Update to version 0.4.0 or later.

**Name of the Vulnerable Software and Affected Versions** sm-crypto versions prior to 0.3.14 **Description** The sm-crypto library, providing JavaScript implementations of Chinese cryptographic algorithms SM2, SM3, and SM4, contains a signature malleability issue in its SM2 signature verification logic. An attacker can generate a new valid signature for a previously signed message using an existing signature. **Recommendations** Update to version 0.3.14 or later.

**Name of the Vulnerable Software and Affected Versions** RustCrypto versions 0.14.0-pre.0 through 0.14.0-rc.0 **Description** The RustCrypto Elliptic Curves library provides Elliptic Curve Cryptography (ECC) support. A denial-of-service issue exists in the SM2 public-key encryption implementation where unchecked slice operations on input buffers derived from ciphertext can lead to bounds-check panics, potentially crashing the calling thread or process. An attacker can exploit this by submitting short or crafted ciphertext. **Recommendations** Update to a version beyond 0.14.0-rc.0.

**Name of the Vulnerable Software and Affected Versions** RustCrypto versions 0.14.0-pre.0 through 0.14.0-rc.0 **Description** The RustCrypto Elliptic Curves library provides general purpose Elliptic Curve Cryptography (ECC) support. A denial-of-service issue exists in the SM2 PKE decryption path where an invalid elliptic-curve point (C1) is decoded and the resulting value is unwrapped without validation. Specifically, `AffinePoint::from encoded point(&encoded c1)` may return a `None` value when the supplied coordinates are syntactically valid but do not lie on the SM2 curve, leading to a panic due to the use of `.unwrap()`. **Recommendations** Update to a version past 0.14.0-rc.0.

**Name of the Vulnerable Software and Affected Versions** RustCrypto versions 0.14.0-pre.0 through 0.14.0-rc.0 **Description** The Elliptic Curves library within RustCrypto, a general-purpose Elliptic Curve Cryptography (ECC) implementation, contains a flaw in its SM2 Public Key Encryption (PKE) implementation. The issue stems from reduced entropy during ephemeral nonce (k) generation, caused by a unit mismatch error requesting only 32 bits of randomness instead of the expected 256 bits. This significantly weakens the encryption, reducing its security from 128 bits to 16 bits, potentially allowing an attacker to recover the nonce and decrypt ciphertext given the public key and ciphertext. **Recommendations** Versions prior to 0.14.0-pre.0 and after 0.14.0-rc.0 should be used.

**Nome do Software Vulnerável e Versões Afetadas** Versões do Flowise anteriores à 3.0.8 **Descrição** O Flowise é uma interface de usuário do tipo arrastar e soltar utilizada para construir fluxos personalizados de grandes modelos de linguagem. Versões anteriores à 3.0.8 contêm uma falha nos componentes `WriteFileTool` e `ReadFileTool` na qual o acesso ao caminho do arquivo não é restrito. Isso permite que atacantes autenticados leiam e gravem arquivos arbitrários em qualquer caminho do sistema de arquivos, potencialmente levando à execução remota de comandos. Aproximadamente 12,7 mil alvos potenciais foram identificados. O problema envolve acesso irrestrito ao caminho do arquivo dentro dos componentes `ReadFileTool` e `WriteFileTool`, permitindo que atacantes realizem pivotamento a partir do acesso ao arquivo. **Recomendações** Atualize o Flowise para a versão 3.0.8 ou posterior.

Nome do Software Vulnerável e Versões Afetadas: Versões do gnark anteriores à 0.14.0 Descrição: O gnark é um framework de sistema de provas de conhecimento zero. A função `Verify` em `eddsa.go` e `ecdsa.go` utilizava o valor `S` de uma assinatura sem validar se 0 ≤ `S` < ordem, o que levou a um problema de maleabilidade de assinatura. Isso se deve à falta de restrições essenciais nos circuitos nativos EdDSA e ECDSA do gnark, permitindo que múltiplas testemunhas distintas satisfaçam as mesmas entradas públicas. Em protocolos onde nullifiers ou verificações anti-replay são derivadas de `R` e `S`, isso possibilita a maleabilidade da assinatura e pode permitir gastos duplos. Recomendações: Atualize para a versão 0.14.0 para resolver este problema.