Wenbo Shen

**Name of the Vulnerable Software and Affected Versions** Grails versions prior to 3.3.17 Grails versions prior to 4.1.3 Grails versions prior to 5.3.4 Grails versions prior to 6.1.0 **Description** A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. **Recommendations** For Grails versions prior to 3.3.17, update to version 3.3.17 or later. For Grails versions prior to 4.1.3, update to version 4.1.3 or later. For Grails versions prior to 5.3.4, update to version 5.3.4 or later. For Grails versions prior to 6.1.0, update to version 6.1.0 or later. As a temporary workaround, consider avoiding data binding to request data until a patch is available.

**Name of the Vulnerable Software and Affected Versions** KubeVirt versions 0.59.0 and prior **Description** KubeVirt is a virtual machine management add-on for Kubernetes. If a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. **Recommendations** As a temporary workaround, gatekeeper users can add a webhook which will block the `virt-handler` service account to modify the spec of a node. For versions 0.59.0 and prior, consider adding a webhook to block the `virt-handler` service account from modifying node specs until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QEMU (affected versions not specified) **Description** A flaw was found in the 9p passthrough filesystem (9pfs) implementation. When a local user in the guest writes an executable file with SUID or SGID, none of these privileged bits are correctly dropped. As a result, in rare circumstances, this flaw could be used by malicious users in the guest to elevate their privileges within the guest and help a host local user to elevate privileges on the host. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.