Scgajge12

**Name of the Vulnerable Software and Affected Versions** e107 versions prior to 2.3.4 **Description** e107 is a content management system (CMS) that contains a Server-Side Request Forgery (SSRF) in the remote file fetcher. This issue allows access to the local environment by specifying a local environment URL within the "Image/File URL:" field of the "From a remote location" option in the "Media Manager" on the administrator screen. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** Update to version 2.3.4.

**Name of the Vulnerable Software and Affected Versions** Strapi versions prior to 4.12.1 **Description** The issue concerns Strapi, an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the login function of Strapi's admin screen, but it is possible to circumvent it. This increases the possibility of unauthorized login by login brute force attack. The vulnerability can be exploited by manipulating the request path, such as changing the case of the path or adding a trailing slash. For example, an attacker can use the `/admin/login` endpoint and then modify it to `/admin/Login` or `/admin/login/` to bypass the rate limit. **Recommendations** For versions prior to 4.12.1, update to version 4.12.1 to fix the issue. As a temporary workaround, consider modifying the rate limiting mechanism to forcibly convert the request path to upper or lower case and remove any extra slashes, as suggested in the measures section of the OSV description. This can help prevent the bypass of the rate limit.

**Name of the Vulnerable Software and Affected Versions** Piwigo versions prior to 13.8.0 **Description** Piwigo is open source photo gallery software. There is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header `User-Agent` is vulnerable at the endpoint that records user information when logging in to the administrator screen. It is possible to execute arbitrary SQL statements. Someone who wants to exploit the vulnerability must be logged in to the administrator screen, even with low privileges. Any SQL statement can be executed, which may leak information from the database. **Recommendations** For versions prior to 13.8.0, update to version 13.8.0 to resolve the issue. As a temporary workaround, consider escaping the parameter contents appropriately for those who want to execute a SQL statement verbatim with user-enterable parameters.

**Name of the Vulnerable Software and Affected Versions** Grav versions prior to 1.7.42 **Description** The issue allows for server-side template injection, which can lead to remote code execution. This can be achieved by embedding malicious PHP code on the administrator screen by a user with page editing privileges. The vulnerability exploits the `system` function in the Twig template engine, allowing an attacker to execute arbitrary system commands. **Recommendations** For Grav versions prior to 1.7.42, update to version 1.7.42 or later to resolve the issue. As a temporary workaround, consider restricting access to the administrator screen and the edit functionality for users with page editing privileges until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** @keystone-6/auth versions 7.0.0 and prior **Description** Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. **Recommendations** To mitigate this issue, apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.

**Name of the Vulnerable Software and Affected Versions** rosariosis versions prior to 8.9.3 **Description** The issue is related to Cross-site Scripting (XSS) - Stored, which occurs when an application stores user input without proper validation, allowing an attacker to inject malicious scripts. This can lead to unauthorized actions on behalf of the user. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. **Recommendations** For versions prior to 8.9.3, update to version 8.9.3 or later to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.