Såawomir Zakrzewski

**Name of the Vulnerable Software and Affected Versions** Ready versions installed at the turn of 2021 and 2022 **Description** The issue allows users to upload files of any type and extension without restriction in the Profile section of the Ready application. If the server is misconfigured, it can result in Remote Code Execution. This misconfiguration was present by default in installations from late 2021 and early 2022. **Recommendations** For versions installed at the turn of 2021 and 2022, ensure proper server configuration to prevent Remote Code Execution, as described in the Required Configuration for Exposure section.

**Name of the Vulnerable Software and Affected Versions** Ready (affected versions not specified) **Description** The issue arises from the improper neutralization of user input in a file search function within the invoices module, allowing for SQL Injection attacks. This can be exploited by a low-privileged user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ready (affected versions not specified) **Description** The issue allows a low-privileged user to provide a link to a local file using the `file://` protocol, enabling the attacker to read the content of the file. This can be used to read the content of system files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ready File Explorer (affected versions not specified) **Description** A cross-site scripting (XSS) issue in the upload functionality of Ready File Explorer allows the injection of arbitrary JavaScript code in the filename. The injected content is stored on the server and is executed every time a user interacts with the uploaded file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Software versions prior to 11.1.x **Description** The application is vulnerable to Stored Cross-Site Scripting (XSS) in the endpoint "/sofer/DocumentService.asc/SaveAnnotation", where input data transmitted via the POST method in the parameters `author` and `text` are not adequately sanitized and validated. This allows for the injection of malicious JavaScript code. The vulnerability was identified in the function for adding new annotations while editing document content. **Recommendations** For versions prior to 11.1.x, update to a version above 11.1.x to resolve the issue. As a temporary workaround, consider restricting access to the "/sofer/DocumentService.asc/SaveAnnotation" endpoint or disabling the function for adding new annotations until a patch is available. Avoid using the parameters `author` and `text` in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SAS application versions 9.4 M7 through 9.4 M8 **Description** The SAS application is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper input validation in the ` program` parameter of the "/SASStoredProcess/do" endpoint. This allows arbitrary JavaScript to be executed when a specially crafted URL is opened by an authenticated user. The attack is possible from a low-privileged user. **Recommendations** For versions 9.4 M7 and 9.4 M8, apply the published hot fixes to resolve the issue. As a temporary workaround, consider restricting access to the "/SASStoredProcess/do" endpoint until the hot fix is applied. Avoid using the ` program` parameter in the affected endpoint until the issue is resolved.