Sebastian Auwaerter

**Name of the Vulnerable Software and Affected Versions** Gantt-Chart for Jira versions prior to 5.5.4 **Description** An issue in the Gantt-Chart module allows authenticated attackers to read and write to the module configuration of other users due to a missing privilege check. This can also be used to deliver an XSS payload to other users' dashboards. **Recommendations** For versions prior to 5.5.4, update to version 5.5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Gantt-Chart module to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** BKS EBK Ethernet-Buskoppler Pro versions prior to 3.01 **Description** The issue allows for the unrestricted upload of a file with a dangerous type. **Recommendations** For versions prior to 3.01, update to version 3.01 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** HiScout GRC Suite versions prior to 3.1.5 **Description** The issue allows for the unrestricted upload of files with dangerous types. **Recommendations** For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue.