Nacl

**Name of the Vulnerable Software and Affected Versions** Grafana (affected versions not specified) **Description** The alertmanager templates test endpoint '/api/alertmanager/grafana/config/api/v1/templates/test' allows the execution of templates without memory limits. Sending a large volume of template execution requests in a short timeframe can lead to Out of Memory (OOM) conditions, causing the Grafana service to crash. This issue is exploitable when anonymous access is enabled, as the endpoint requires very low privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Shell (affected versions not specified) **Description** A security issue exists in Windows Shell that allows an unauthorized attacker to perform spoofing. This requires physical access to the system. The issue involves an absolute path traversal, enabling attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Host Process for Windows Tasks (affected versions not specified) **Description** An issue with how links are handled before accessing files ('link following') in Host Process for Windows Tasks can allow a local attacker with authorization to gain higher privileges on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apache Airflow versions prior to 3.0.5 **Description** A parameter in the `example dag decorator` dag was not properly validated, potentially allowing a user of the Airflow UI to redirect the example to a malicious server and execute code on a worker node. This exploitation required that example dags were enabled in a production environment, which is not the default configuration, or that the example dag code was copied to create a similar dag. **Recommendations** Review and update the `example dag decorator` dag to align with the changes implemented in Airflow 3.0.5.

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.0.M1 through 9.0.106 Description: A race condition exists due to concurrent execution using a shared resource with improper synchronization when using the APR/Native connector. This issue is particularly noticeable with client-initiated closes of HTTP/2 connections. Recommendations: Upgrade to version 9.0.107 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.0-M1 through 11.0.1 Description: The issue is a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that can be exploited to bypass case sensitivity checks and execute arbitrary code. This can be done by uploading a file that can be turned into malicious JSP code, resulting in remote code execution. The exploit can be carried out on case-insensitive file systems where Tomcat's default servlet has write functionality enabled. Over 894,000 Apache Tomcat applications are potentially vulnerable to this exploit. A proof-of-concept has been released, and it is expected that more exploitation will occur. Recommendations: Update to patched versions of Apache Tomcat and adjust Java configuration accordingly to prevent remote code execution. As a temporary workaround, consider disabling the default servlet's write functionality on case-insensitive file systems to minimize the risk of exploitation. Restrict access to the vulnerable `jsp` files to prevent malicious code execution until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** eyoucms version 1.6.4 **Description** The issue is related to a PHP file inclusion vulnerability in the template configuration, allowing attackers to execute code or system commands through a carefully crafted malicious payload. **Recommendations** For eyoucms version 1.6.4, update to a version that fixes this issue, as the current version allows attackers to execute malicious code through the template configuration.

**Name of the Vulnerable Software and Affected Versions** Apache Tomcat versions prior to 11.0.2, 10.1.34, or 9.0.98. **Description** The Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue. **Recommendations** - Upgrade Apache Tomcat to versions 11.0.2+, 10.1.34+, or 9.0.98+ to patch CVE-2024-50379 and CVE-2024. - Temporarily restrict write access to the default servlet if immediate update is not possible. - Disable the “examples” web application in Apache Tomcat to protect against the vulnerability. - Set the system property sun.io.useCanonCaches to false if using Java 8 or Java 11. - Set the system property sun.io.useCanonCaches to false if using Java 17. - No further configuration is required for Java 21 onwards. - Tomcat 11.0.3, 10.1.35, and 9.0.99 onwards will include checks that sun.io.useCanonCaches is set appropriately before allowing the default servlet to be write enabled on a case insensitive file system. Tomcat will also set sun.io.useCanonCaches to false by default where it can.