CVE Vulnerability Catalog

A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_views.py of the component Bulk Case Update. The manipulation leads to missing authorization. The attack is possible to be carried out remotely. Upgrading to version 1.3.0 is able to resolve this issue. The identifier of the patch is 799bb1210238f402c0c4948c8eedb6e61cd0c8d7.

A flaw was found in online-clinic-management-system in doctorlogin.php, where manipulation of the doc_mail/doc_pswd arguments leads to SQL injection. The attack can be executed remotely and a public exploit may already be in use. The project was notified but has not responded.

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface FIFOs under a predictable path derived from the agent name and a hash of the workload configuration. If the path already exists at agent startup, it is reused without validating owner or permissions, allowing a local user to impersonate the workload and modify cluster state.

A double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

A race condition due to improper synchronization of a shared resource in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

In the blaze Scala library prior to 0.23.18 and from 1.0.0-M1 to 1.0.0-M42, the hand-written HTTP/1.1 parser accepts invalid header names, obsolete folded lines, unsupported Transfer-Encoding values, duplicate Content-Length fields, and requests with both Transfer-Encoding and Content-Length. Parser disagreement with a fronting intermediary can enable authorization bypass, response-queue poisoning, or cache poisoning.

In the Pay library (Ruby on Rails) prior to 11.6.2, Pay::Webhooks::PaddleBillingController compares the SHA-256 HMAC with the attacker-controlled h1 token from the Paddle-Signature header using String#==, allowing an attacker to recover a valid signature via timing measurements. A forged webhook can alter billing state, provision paid features, or trigger notifications.

OpenZeppelin Contracts Wizard prior to @openzeppelin/wizard 0.10.11, wizard-cairo 3.0.1, wizard-stellar 0.6.2, and wizard-stylus 0.3.1 prints info.securityContact and info.license verbatim into single-line comments in generated source. A line terminator ends the comment, causing following input to be emitted as source declarations.

DotVVM prior to versions 4.2.11, 4.3.15, and 5.0.0-preview09-final allows unauthenticated users to submit files directly to DotvvmFileUploadMiddleware without an X-DotVVM-UploadToken generated by the FileUpload component. An attacker can repeatedly upload files and fill application storage, causing denial of service. DotvvmConfiguration.Security.AuthorizeFileUpload can additionally restrict which users may upload files.

DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewModelCreatedAsync, and IPresenterActionFilter.OnPresenterExecutingAsync implementations return completed tasks instead of invoking the corresponding checks. Applications relying on this filter can therefore expose protected commands, view models, or presenters to unauthorized requests without any special bypass technique.

In DotVVM prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, a route with multiple unconstrained parameters in one path segment can cause excessive regex backtracking in DotvvmRoute.IsMatch when a long near-match path is supplied. The lack of a matching timeout in DotvvmRouteParser.RouteRegex leads to resource exhaustion.

backpack/crud from version 6.0.0 to 6.8.15 and 7.0.47 contains a vulnerability in HasMany and MorphMany handling through attachManyRelation during CRUD create and update operations. The vulnerability allows an authenticated low-privilege administrator to modify unrelated child records, including reassigning, detaching, nulling, or deleting them, even across ownership or tenant boundaries. This requires that the records should not be attachable or removable by that administrator and the absence of additional application-level authorization.

SpiceDB from 1.34.0 until 1.54.0 can return PERMISSIONSHIP_HAS_PERMISSION instead of PERMISSIONSHIP_CONDITIONAL_PERMISSION or PERMISSIONSHIP_NO_PERMISSION because checkRequestToKey() and checkRequestToKeyWithCanonical() in internal/dispatch/keys/computed.go omit CheckHints when constructing dispatch Check cache keys. A result computed for one hint set can poison the cache entry used by a semantically different authorization check.

Allure 2 prior to version 2.39.0 contains an XSS vulnerability in the ansi.js helper, which passes attacker-influenced statusMessage and statusTrace values through AnsiToHtml without HTML escaping and wraps the result in Handlebars SafeString, disabling template auto-escaping in status-details.hbs. JunitXmlPlugin.java can populate these fields directly from crafted JUnit XML failure messages and traces, and equivalent input flows exist in the TRX, xUnit XML, xctest, and Allure1 and Allure2 plugins. When a user views the affected status details, unescaped markup executes arbitrary JavaScript in the report origin, which can expose report data and compromise sessions associated with that origin. This is an incomplete-fix case because PR 3271 escaped link helpers but did not address the ANSI helper.

Allure 2 prior to version 2.39.0 contains a path traversal vulnerability in the HTTP server started by allure serve and allure open. The Commands.setUpServer() function uses URI.getPath() and passes the percent-decoded request path to reportDirectory.resolve() without normalizing the result or confirming that it remains inside that directory. An unauthenticated client that can reach the server can submit parent-directory segments, including percent-encoded segments, and cause serveFile() to return any regular file readable by the Allure process. The server binds to localhost by default, but the --host option can expose it to other systems, and local users, adjacent containers, or browser-origin attacks may reach a local listener. This can disclose credentials, configuration, source code, build secrets, and other CI/CD data.

Tract prior to versions 0.21.17, 0.22.3, and 0.23.2 contains a vulnerability in the tract-onnx crate that passes the attacker-controlled external_data location from an ONNX model through onnx/src/tensor.rs get_external_resources and joins the value to the model directory without rejecting absolute paths or parent directory components. Loading an untrusted model through model_for_path can therefore make onnx/src/data_resolver.rs MmapDataResolver open an arbitrary local file and place the file contents into model tensors or inference output. Attacker-controlled offset and length fields can also select an out-of-range mapping slice and cause a denial of service, but the flaw does not write files or execute code.

In LangChain MongoDB integrations prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list(), alist(), and MongoDBStore.search() incorporate filter dictionaries into MongoDB queries without rejecting keys prefixed with $. An authenticated caller controlling a filter can inject MongoDB operators such as $regex or $where, bypassing tenant isolation.

In flat-to-nested prior to 1.1.2, FlatToNested.prototype.convert in index.js uses attacker-influenced id and parent fields as keys in temp and pendingChildOf objects. When parent or id is __proto__, prototype pollution occurs, potentially causing application-logic corruption, denial of service, or further exploitation.

Prior to 6.20.2 and 7.0.0b3, a devpi server configured with the primary or deprecated master role allows an unauthenticated, modified GET request to the +changelog route because verify_primary does not reject a missing identity and therefore fails to require ReplicaIdentity. The response can disclose complete database content, including Argon2 password hashes and identifiers and salts for devpi-tokens.

In Flask-Reuploaded from 1.5.0 until 1.6.0, UploadSet.save(storage, name=...) applies lowercase_ext to the default path but uses the case-preserving extension helper for a caller-supplied name before extension_allowed evaluates an AllExcept denylist. An attacker can bypass a lowercase denylist with a mixed-case dangerous extension and store the file in the served upload directory.