Tritium

**Name of the Vulnerable Software and Affected Versions:** kone-net go-chat (affected versions not specified) **Description:** A critical issue exists in the Endpoint component of kone-net go-chat. The `GetFile` function within `go-chat/api/v1/file controller.go` is susceptible to path traversal due to manipulation of the `fileName` argument. This allows for remote exploitation. The exploit has been publicly disclosed. **Recommendations:** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: letseeqiji gorobbs versions up to 1.0.8 Description: A critical issue exists in letseeqiji gorobbs. The `ResetUserAvatar` function within the `controller/api/v1/user.go` file is susceptible to path traversal due to manipulation of the `filename` argument. This allows for remote exploitation. The exploit has been publicly disclosed. Recommendations: Versions prior to 1.0.9: Address the path traversal issue in the `ResetUserAvatar` function by sanitizing the `filename` argument to prevent unauthorized file access.

Name of the Vulnerable Software and Affected Versions: mao888 bluebell-plus versions up to 2.3.0 Description: A problematic vulnerability has been found in the JWT Token Handler component, affecting the processing of the file bluebell backend/pkg/jwt/jwt.go. The issue involves the manipulation of the `mySecret` argument with the input bluebell-plus, leading to the use of a hard-coded password. The attack can be initiated remotely, with a rather high complexity and difficult exploitation. The exploit has been disclosed to the public and may be used. Recommendations: For mao888 bluebell-plus versions up to 2.3.0, consider updating to a version that fixes the hard-coded password issue in the JWT Token Handler component. As a temporary workaround, restrict access to the `mySecret` argument in the JWT Token Handler to minimize the risk of exploitation. Avoid using the `mySecret` argument with the input bluebell-plus in the affected component until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Done-0 Jank up to 322caebbad10568460364b9667aa62c3080bfc17 Description: A problematic issue was found in the JWT Token Handler component, specifically in the file internal/utils/jwt utils.go. The manipulation of the `accessSecret`/`refreshSecret` argument with the input `jank-blog-secret`/`jank-blog-refresh-secret` leads to the use of a hard-coded password. This issue can be exploited remotely, with a rather high complexity of attack and difficult exploitability. The exploit has been disclosed to the public and may be used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: xiaoyunjie openvpn-cms-flask versions 1.2.7 and earlier Description: A critical issue has been found in the User Creation Endpoint component, specifically affecting the `create user` function in the `/app/api/v1/openvpn.py` file. The manipulation of the `Username` argument leads to command injection, allowing for remote attacks. Recommendations: For versions 1.2.7 and earlier, upgrade to version 1.2.8 to address this issue. As a temporary workaround, consider restricting access to the `create user` function or the `/app/api/v1/openvpn.py` file until the upgrade is applied.

Name of the Vulnerable Software and Affected Versions: gooaclok819 sublinkX versions up to 1.8 Description: A critical issue has been found, affecting the function `AddTemp` of the file `api/template.go`. The manipulation of the argument `filename` leads to path traversal. This issue can be exploited remotely. Upgrading to version 1.9 addresses this issue. Recommendations: For versions up to 1.8, upgrade to version 1.9 to resolve the issue. As a temporary workaround, consider restricting the use of the `AddTemp` function in the `api/template.go` file until the upgrade is applied.

Name of the Vulnerable Software and Affected Versions: xiaoyunjie openvpn-cms-flask versions 1.2.7 and earlier Description: A critical issue was found in the File Upload component, specifically affecting the `Upload` function of the `app/plugins/oss/app/controller.py` file. The manipulation of the `image` argument leads to path traversal. This issue can be initiated remotely. Recommendations: For versions 1.2.7 and earlier, upgrade to version 1.2.8 to address this issue. As a temporary workaround, consider restricting access to the `Upload` function of the `app/plugins/oss/app/controller.py` file until the upgrade is applied.

Name of the Vulnerable Software and Affected Versions: gooaclok819 sublinkX versions up to 1.8 Description: A vulnerability was found in the unknown code of the file middlewares/jwt.go. The manipulation with the input `sublink` leads to the use of a hard-coded cryptographic key. The attack can be initiated remotely. The complexity of an attack is rather high, and the exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Recommendations: For gooaclok819 sublinkX versions up to 1.8, upgrade to version 1.9 to address this issue. As a temporary workaround, consider restricting access to the vulnerable `middlewares/jwt.go` file until a patch is applied. Avoid using the hard-coded cryptographic key in the affected component until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410 **Description** A critical vulnerability was found in the PATCH Request Handler component of szluyu99 gin-vue-blog, affecting unknown code in the file gin-blog-server/internal/manager.go. This leads to improper authorization and can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jrohy trojan versions up to 2.15.3 **Description** A critical issue affects the `LogChan` function in the file `trojan/util/linux.go`. The manipulation of the argument `c` leads to os command injection. This issue can be initiated remotely, but the complexity of an attack is rather high, making exploitation difficult. **Recommendations** For Jrohy trojan versions up to 2.15.3, consider disabling the `LogChan` function until a patch is available to prevent os command injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Lost and Found Information System version 1.0 **Description** A critical issue affects the HTTP POST Request Handler component, specifically the file /classes/Master.php?f=save inquiry. The manipulation of the `id` argument leads to SQL injection, allowing remote attacks. **Recommendations** For version 1.0, consider disabling the `save inquiry` functionality in the /classes/Master.php file until a patch is available. Restrict access to the HTTP POST Request Handler component to minimize the risk of exploitation. Avoid using the `id` argument in the affected API endpoint until the issue is resolved.