Oscar Uribe

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue exists in the Audit Trail component. This occurs because user-controlled input is not properly neutralized before being used to generate HTML output. Stored XSS is a type of vulnerability where a malicious script is permanently stored on the target server, which then serves the script to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs due to improper neutralization of user-controlled input within the `frappe.ui.Tree` component. This allows malicious scripts to be stored and executed when rendering node labels in the Tree View. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue exists due to improper neutralization of user-controlled input within the Number Card component, specifically affecting the rendering of filter fields. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs in the Number Card component when user-controlled data is unsafely evaluated. This happens specifically within the `filters config` variable, where the use of the `eval()` function allows the execution of malicious scripts. **Recommendations** As a temporary workaround, restrict the use of the `filters config` variable in the Number Card component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs due to improper neutralization of user-controlled input within the Notifications > Events panel. This allows an attacker to store malicious scripts that are later executed in the browser of other users when the affected panel is rendered. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs due to improper neutralization of user-controlled input within the `MultiSelectDialog` component. Stored XSS is a type of vulnerability where a malicious script is permanently stored on the target server, which is then served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Cross-Site Scripting (XSS) issue occurs due to improper neutralization of untrusted input within the Form Dashboard headline renderer. This allows for stored XSS, where malicious scripts are permanently stored on the server and served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs due to improper neutralization of user-controlled input within the File View breadcrumb renderer. Stored XSS is a type of vulnerability where a malicious script is permanently stored on the target server, which is then served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs due to improper neutralization of user-controlled input within the Desk desktop icon renderer. Stored XSS is a type of vulnerability where a malicious script is permanently stored on the target server, which is then served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Reflected Cross-Site Scripting (XSS) issue occurs in the `dashboard-view` component due to improper neutralization of user-controlled input during breadcrumb rendering. Reflected XSS is a type of attack where a malicious script is reflected off a web application to the victim's browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue occurs due to improper neutralization of user-controlled input within the `frappe.get avatar()` function during image rendering. Stored XSS is a type of vulnerability where a malicious script is permanently stored on the target server, which is then served to other users. **Recommendations** As a temporary workaround, consider restricting the use of the `frappe.get avatar()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Frappe Framework version 17.0.0-dev **Description** A Stored Cross-Site Scripting (XSS) issue allows an authenticated attacker with write access to Auto Repeat to persist HTML or JavaScript within the `reference document` variable via a whitelisted write path. The script executes when users open the affected Auto Repeat form. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** X-VPN macOS website versions 77.0 through 77.5 **Description** A race condition and symlink manipulation in the quarantine and restore workflow allow a local attacker to achieve privileged file corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** glp versions prior to 11.0.7 **Description** An unauthenticated user with write access to the knowledge base can store a Cross-Site Scripting (XSS) payload in a knowledge base item. XSS is a type of security flaw where malicious scripts are injected into trusted websites. **Recommendations** Update to version 11.0.7 or later.

**Name of the Vulnerable Software and Affected Versions** Corteza version 2024.9.8 **Description** An issue exists in the Microsoft SQL Server (MSSQL) backend when filtering Compose records by the `meta` field, which allows for SQL injection. SQL injection is a type of flaw that enables an attacker to interfere with the queries that an application makes to its database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Helpy version 2.8.0 **Description** A stored cross-site scripting issue exists in the post author display logic. A registered user can persist arbitrary HTML in the account name field, which is then rendered unescaped in public forum threads, the admin ticket view, and HTML notification emails sent to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Helpy version 2.8.0 **Description** A stored cross-site scripting issue exists in the knowledge base Doc rendering logic. An authenticated attacker with admin or agent editor privileges can persist arbitrary HTML or JavaScript in the `body` field of a knowledge base Doc. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe version 16.10.0 **Description** An authenticated attacker can persist crafted values in multiple field types to trigger client-side script execution when another user opens the affected document in Desk. This occurs because vulnerable formatter implementations interpolate stored values into raw HTML attributes and element content without proper escaping. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Frappe version 16.10.10 **Description** An authenticated attacker can store a crafted tag value in ` user tags` to trigger JavaScript execution when a victim opens the list or report view where tags are rendered. This occurs because the renderer interpolates tag content into HTML attributes and element content without proper escaping. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iBoysoft NTFS for Mac version 8.0.0 **Description** iBoysoft NTFS for Mac contains a local privilege escalation issue in its privileged helper daemon, `ntfshelperd`. The daemon exposes an NSConnection service that operates with root privileges without implementing any authentication or authorization checks. This allows for potential unauthorized access and control over the system. **Recommendations** Update iBoysoft NTFS for Mac to a version with the fix. As a temporary workaround, consider disabling the `ntfshelperd` daemon until a patch is available.