Gabriele Zuddas

Name of the Vulnerable Software and Affected Versions: Advanced Advertising System plugin for WordPress versions up to and including 1.3.1 Description: The issue arises from insufficient validation of the redirect URL provided through the `redir` parameter. This allows unauthenticated attackers to redirect users to potentially malicious sites if they can trick them into performing a specific action. Recommendations: For versions up to and including 1.3.1, update to a version higher than 1.3.1 to resolve the issue. As a temporary workaround, consider restricting access to the `redir` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** All-in-One Video Gallery plugin for WordPress versions up to, and including 2.6.0 **Description** The issue allows unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server via the `dl` parameter found in the ~/public/video.php file. This enables arbitrary file downloads and blind server-side request forgery. **Recommendations** For versions up to, and including 2.6.0, consider disabling access to the ~/public/video.php file or restricting the use of the `dl` parameter until a patch is available. Avoid using the `dl` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** iText versions prior to 7.1.17 **Description** The issue allows command injection via a CompareTool filename that is mishandled on the `gs` (aka Ghostscript) command line in `GhostscriptHelper.java`. This can occur when a malicious filename is provided to the CompareTool, potentially leading to the execution of arbitrary commands. **Recommendations** For versions prior to 7.1.17, update to version 7.1.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the `GhostscriptHelper.java` class or disabling the CompareTool functionality until a patch is applied. Avoid using potentially malicious filenames with the CompareTool to minimize the risk of exploitation.