older versions of firefox for aspera connect

#Older versions of firefox for aspera connect code

By combining the XSS vulnerability present in several upload forms and a javascript request to the present API, it is possible to trigger the creation of a user with administrative rights by opening an SVG file as an administrator user. An authenticated user can control both parameters (action and function) from '/api/index.php.Ĭlaroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user.

#Older versions of firefox for aspera connect code

An authenticated user can read system files via crafted POST request using parameter value as LFI payload.ĬuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). The component 'cuppa/api/index.php' of CuppaCMS v1.0 is Vulnerable to LFI. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability.Īrcher Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system.

Affected products and versions are as follows: Movable Type 7 r.5202 and earlier, Movable Type Advanced 7 r.5202 and earlier, Movable Type 6.8.6 and earlier, Movable Type Advanced 6.8.6 and earlier, Movable Type Premium 1.52 and earlier, and Movable Type Premium Advanced 1.52 and earlier. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. contains a command injection vulnerability. Movable Type XMLRPC API provided by Six Apart Ltd. Furthermore, wolfSSL_clear is part of wolfSSL's compatibility layer and is not enabled by default. Only servers that use wolfSSL_clear instead of the recommended SSL_free SSL_new sequence are affected. Note that this bug is only triggered when resuming sessions using TLS session resumption. If the server reuses the previous session structure (struct WOLFSSL) by calling wolfSSL_clear(WOLFSSL* ssl) on it, the next received Client Hello (that resumes the previous session) crashes the server.

This occurs in the second session, which is created through TLS session resumption and reuses the initial struct WOLFSSL. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation fault. There is an improper access control vulnerability in Portal for ArcGIS versions 10.8.1 and below which could allow a remote, unauthenticated attacker to access an API that may induce Esri Portal for ArcGIS to read arbitrary URLs.Īn issue was discovered in wolfSSL before 5.5.0. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands. The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input to the API request.Ĭasdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.Īn issue was discovered in Aviatrix Gateway before and 6.7.x before. There are no known workarounds for this issue. This issue has been addressed in version `v1`. If an alert is dismissed or any other custom field contains executable code / formulas, it might be run when an endpoint opens that CSV file in a spreadsheet program. In affected versions this GitHub Action creates a CSV file without sanitizing the output of the APIs. Some-natalie/ghas-to-csv (GitHub Advanced Security to CSV) is a GitHub action which scrapes the GitHub Advanced Security API and shoves it into a CSV.