Dawid Czarnecki

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.176 **Description** An issue was discovered in the app/Controller/AppController.php file, where it mishandles parameter parsing. **Recommendations** For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.176 **Description** An issue was discovered in the app/Model/AppModel.php file, where it lacks a checkParam function for characters such as alphanumerics, underscore, dash, period, and space. **Recommendations** For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue. As a temporary workaround, consider restricting input to the AppModel to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.176 **Description** An issue was discovered in the app/Model/AppModel.php file, where it mishandles filters. **Recommendations** For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.176 **Description** An issue was discovered in the app/Model/AppModel.php file, where it mishandles order clauses. **Recommendations** For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.176 **Description** An issue was discovered where the app/Controller/Component/IndexFilterComponent.php file does not properly filter out query parameters. **Recommendations** For versions prior to 2.4.176, update to version 2.4.176 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** KNIME Business Hub versions prior to 1.4.0 **Description** The issue allows an unauthenticated remote attacker to access internal information about the application, such as versions, host names, or IP addresses. No personal information or application data was exposed. **Recommendations** For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MISP versions 2.4.167 and earlier **Description** The issue is related to an XSS in authkey add via a Referer field in the app/View/AuthKeys/authkey display.ctp file. **Recommendations** For MISP versions 2.4.167 and earlier, as a temporary workaround, consider restricting access to the authkey add functionality until a patch is available. Avoid using the Referer field in the affected authkey add functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.167 **Description** The issue is related to Cross-Site Scripting (XSS) in the template file uploads, specifically in the app/View/Templates/upload file.ctp file. This allows for malicious script execution. **Recommendations** For versions prior to 2.4.167, update to version 2.4.167 or later to resolve the issue. As a temporary workaround, consider restricting access to the template file uploads to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** CBRN-Analysis versions prior to 22 **Description** The issue allows XXE attacks via an XML document, leading to NTLMv2-SSP hash disclosure. This occurs when processing a malicious XML document. **Recommendations** For versions prior to 22, update to version 22 or later to resolve the issue. As a temporary workaround, consider restricting the processing of external XML documents to minimize the risk of exploitation. Avoid using the `am mws XML document` in the affected system until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** CBRN-Analysis versions prior to 22 **Description** The issue is related to weak file permissions under the Public Profile, which can lead to the disclosure of file contents or privilege escalation. **Recommendations** For versions prior to 22, update to version 22 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.158 **Description** An issue was discovered in MISP where PHAR deserialization can occur. **Recommendations** For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.158 **Description** The issue is related to a Cross-Site Scripting (XSS) vulnerability in the app/Controller/OrganisationsController.php file, specifically in situations involving a "weird single checkbox page." **Recommendations** For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue. As a temporary workaround, consider restricting access to the OrganisationsController.php file until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.158 **Description** The issue is related to a Cross-Site Scripting (XSS) vulnerability in the cerebrate view. This occurs when one administrator enters a `javascript:` URL in the `URL` field, and another administrator clicks on it, allowing for the execution of malicious JavaScript code. **Recommendations** For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue. As a temporary workaround, consider restricting access to the cerebrate view or avoiding the use of `javascript:` URLs in the `URL` field until the update is applied.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.158 **Description** An issue was discovered in the event graph via a tag name, allowing stored XSS. **Recommendations** For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue. As a temporary workaround, consider restricting the use of tag names in the event graph to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.158 **Description** The issue is related to stored XSS in the galaxy clusters. **Recommendations** For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** MISP versions prior to 2.4.158 **Description** An issue was discovered in MISP, where there is stored XSS via the LinOTP login field. **Recommendations** For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue. As a temporary workaround, consider restricting access to the LinOTP login field to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Cerebrate versions through 1.4 **Description** An issue was discovered that allowed an unprivileged user to edit and modify sharing groups due to an incorrect sharing group ACL. **Recommendations** For versions through 1.4, as a temporary workaround, consider restricting access to sharing group modification features until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cerebrate versions through 1.4 **Description** An issue was discovered that allows username enumeration to occur. **Recommendations** For versions through 1.4, consider restricting access to sensitive user information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Cerebrate versions through 1.4 **Description** An issue was discovered that allows reflected XSS in form descriptions via a user-controlled description. This occurs in the genericForm component. **Recommendations** For versions through 1.4, as a temporary workaround, consider restricting user input in form descriptions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: KNIME Server versions 4.12.5 and earlier KNIME Server versions 4.13.x before 4.13.4 Description: The issue allows local users to read the administrator's password from a file due to inadequate file access controls when the software is installed in unattended mode. Recommendations: For KNIME Server versions 4.12.5 and earlier, update to version 4.12.6 or later. For KNIME Server versions 4.13.x before 4.13.4, update to version 4.13.4 or later.