Vedant Roy

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints, such as cloud metadata services, or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Foxit eSign (affected versions not specified) Description A potential insecure direct object reference (IDOR) vulnerability was addressed in the signing invitation acceptance process. Under certain conditions, this issue could have allowed an attacker to access or modify unauthorized resources by manipulating user-supplied object identifiers, potentially leading to forged signatures and compromising the integrity and authenticity of documents undergoing the signing process. The issue was caused by insufficient authorization validation on referenced resources during request processing. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.