Huy Vo

Name of the Vulnerable Software and Affected Versions: DigitalDruid HotelDruid version 3.0.7 Description: The issue allows an attacker to execute arbitrary code and obtain sensitive information. This is achieved via the `ripristina backup` parameter in the "crea backup.php" endpoint. Recommendations: For DigitalDruid HotelDruid version 3.0.7, consider restricting access to the "crea backup.php" endpoint until a patch is available. As a temporary workaround, avoid using the `ripristina backup` parameter in this endpoint to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: HotelDruid version 3.0.7 Description: A CSRF issue in the "gestione utenti.php" endpoint allows attackers to perform unauthorized actions, such as modifying user passwords, on behalf of authenticated users. This is due to the lack of origin or referrer validation and the absence of CSRF tokens. Recommendations: For HotelDruid version 3.0.7, consider implementing origin or referrer validation and adding CSRF tokens to the "gestione utenti.php" endpoint to prevent unauthorized actions. As a temporary workaround, restrict access to the "gestione utenti.php" endpoint to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: HotelDruid versions 3.0.7 and earlier Description: The issue allows users to set weak passwords due to the lack of enforcement of password strength policies. Recommendations: For HotelDruid versions 3.0.7 and earlier, consider implementing a custom password strength policy to enforce strong passwords until a patch is available. As a temporary workaround, restrict the ability of users to set weak passwords by configuring the system to require a minimum password length and complexity.