Daw1012345

**Name of the Vulnerable Software and Affected Versions** Nextcloud Server versions 31.0.0 through 31.0.13 Nextcloud Server versions 32.0.0 through 32.0.3 Nextcloud Enterprise Server versions prior to 28.0.14.15 Nextcloud Enterprise Server versions prior to 29.0.17.12 Nextcloud Enterprise Server versions prior to 30.0.17.7 Nextcloud Enterprise Server versions prior to 31.0.14 Nextcloud Enterprise Server versions prior to 32.0.4 **Description** An issue exists in the content collaboration platform where non-admin users can copy arbitrary files into their own directory using path traversal, provided that `{lang}` is used in the template directory configuration value. The ability to copy files depends on the underlying unix permissions. **Recommendations** Upgrade Nextcloud Server to version 31.0.14 or 32.0.4. Upgrade Nextcloud Enterprise Server to version 28.0.14.15, 29.0.17.12, 30.0.17.7, 31.0.14, or 32.0.4.

**Name of the Vulnerable Software and Affected Versions** Indico versions prior to 3.3.12 **Description** Indico is an event management system that utilizes Flask-Multipass, a multi-backend authentication system for Flask. Due to vulnerabilities in TeXLive and obscure LaTeX syntax that circumvented Indico's LaTeX sanitizer, specially crafted LaTeX snippets could be used to read local files or execute code with the privileges of the user running Indico on the server. This issue does not apply if server-side LaTeX rendering is not in use, meaning the `XELATEX PATH` setting is not configured in `indico.conf`. **Recommendations** Update to Indico version 3.3.12 as soon as possible. Enable the containerized LaTeX renderer using `podman` to isolate it from the rest of the system. Remove the `XELATEX PATH` setting from `indico.conf` or set it to `None` and restart the `indico-uwsgi` and `indico-celery` services to disable LaTeX functionality.