deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-3w8q-xq97-5j7x
Package: org.mozilla:rhino (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 1.7.14.1
Patched in: 1.7.14.1

Summary: Rhino has high CPU usage and potential DoS when passing specific numbers to `toFixed()` function

Details:
When an application passed an attacker controlled float poing number into the `toFixed()` function, it might lead to high CPU consumption and a potential Denial of Service.

Small numbers go through this call stack: `NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult`
where `pow5mult` attempts to raise `5` to a ridiculous power.

Example code: `(4.47118444E-314).toFixed(2)`
GitHub Security Advisory: GHSA-vqf4-7m7x-wgfc
Package: net.jpountz.lz4:lz4 (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: <= 1.3.0
Patched in: unpatched

Summary: LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS

Details:
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived: https://github.com/lz4/lz4-java, and Sonatype has added a redirect from org.lz4:lz4-java:1.8.1 to the new group ID.
GitHub Security Advisory: GHSA-vqf4-7m7x-wgfc
Package: org.lz4:lz4-pure-java (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: <= 1.8.0
Patched in: unpatched

Summary: LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS

Details:
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived: https://github.com/lz4/lz4-java, and Sonatype has added a redirect from org.lz4:lz4-java:1.8.1 to the new group ID.
GitHub Security Advisory: GHSA-vqf4-7m7x-wgfc
Package: org.lz4:lz4-java (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 1.8.1
Patched in: 1.8.1

Summary: LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS

Details:
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived: https://github.com/lz4/lz4-java, and Sonatype has added a redirect from org.lz4:lz4-java:1.8.1 to the new group ID.
GitHub Security Advisory: GHSA-vqf4-7m7x-wgfc
Package: at.yawk.lz4:lz4-java (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 1.8.1
Patched in: 1.8.1

Summary: LZ4 Java Compression has Out-of-bounds memory operations which can cause DoS

Details:
Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived: https://github.com/lz4/lz4-java, and Sonatype has added a redirect from org.lz4:lz4-java:1.8.1 to the new group ID.
GitHub Security Advisory: GHSA-xx7v-hqxh-cjr9
Package: org.apache.struts:struts2-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-459: Incomplete Cleanup
Vulnerable versions: >= 2.5.0, <= 2.5.33
Patched in: unpatched

Summary: Apache Struts is Vulnerable to DoS via File Leak

Details:
Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.
GitHub Security Advisory: GHSA-xx7v-hqxh-cjr9
Package: org.apache.struts:struts2-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-459: Incomplete Cleanup
Vulnerable versions: >= 2.0.0, <= 2.3.37
Patched in: unpatched

Summary: Apache Struts is Vulnerable to DoS via File Leak

Details:
Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.
GitHub Security Advisory: GHSA-xx7v-hqxh-cjr9
Package: org.apache.struts:struts2-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-459: Incomplete Cleanup
Vulnerable versions: >= 7.0.0, < 7.1.1
Patched in: 7.1.1

Summary: Apache Struts is Vulnerable to DoS via File Leak

Details:
Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.
GitHub Security Advisory: GHSA-xx7v-hqxh-cjr9
Package: org.apache.struts:struts2-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-459: Incomplete Cleanup
Vulnerable versions: >= 6.0.0, < 6.8.0
Patched in: 6.8.0

Summary: Apache Struts is Vulnerable to DoS via File Leak

Details:
Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.
GitHub Security Advisory: GHSA-mw3v-mmfw-3x2g
Package: org.opensearch:opensearch-common (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 2.19.4
Patched in: 2.19.4

Summary: OpenSearch is vulnerable to DoS via complex query_string inputs

Details:
A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.

This issue affects all OpenSearch versions below 2.19.4 and versions 3.0.0 through 3.2.0.
GitHub Security Advisory: GHSA-mw3v-mmfw-3x2g
Package: org.opensearch:opensearch-common (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: >= 3.0.0, < 3.3.0
Patched in: 3.3.0

Summary: OpenSearch is vulnerable to DoS via complex query_string inputs

Details:
A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.

This issue affects all OpenSearch versions below 2.19.4 and versions 3.0.0 through 3.2.0.
GitHub Security Advisory: GHSA-vjr8-56p3-fmqq
Package: org.keycloak:keycloak-quarkus-server (MAVEN)
Severity: LOW (CVSS 3.7)
CWE: CWE-427: Uncontrolled Search Path Element
Vulnerable versions: < 26.4.4
Patched in: 26.4.4

Summary: Keycloak unable to restrict access to the admin console

Details:
A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occurs at least via ha-proxy, as it can be tricked to using relative/non-normalized paths to access the /admin application path relative to /realms which is expected to be exposed.
GitHub Security Advisory: GHSA-j4vq-q93m-4683
Package: org.keycloak:keycloak-quarkus-dist (MAVEN)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-1327: Binding to an Unrestricted IP Address
Vulnerable versions: < 26.4.4
Patched in: 26.4.4

Summary: Keycloak has debug default bind address

Details:
A vulnerability exists in Keycloak's server distribution where enabling debug mode (`--debug`) insecurely defaults to binding the Java Debug Wire Protocol (JDWP) port to all network interfaces (`0.0.0.0`). This exposes the debug port to the local network, allowing an attacker on the same network segment to attach a remote debugger and achieve remote code execution within the Keycloak Java virtual machine.

Red Hat evaluates this as a Moderate impact vulnerability due to the requirement of running debug mode and untrusted network. Also, for Red Hat Single Sign-On, this must as well be bound to 0.0.0.0 address, which is not recommended in production scenarios.
GitHub Security Advisory: GHSA-53v5-9752-qq92
Package: org.nutz:nutzboot-parent (MAVEN)
Severity: MODERATE (CVSS 7.3)
CWE: CWE-266: Incorrect Privilege Assignment, CWE-863: Incorrect Authorization
Vulnerable versions: <= 2.6.0-SNAPSHOT
Patched in: unpatched

Summary: NutzBoot Incorrect Privilege Assignment vulnerability

Details:
A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation of the argument from/to/wei leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
GitHub Security Advisory: GHSA-qp56-qj59-hjf8
Package: org.nutz:nutzboot-parent (MAVEN)
Severity: LOW (CVSS 4.3)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 2.6.0-SNAPSHOT
Patched in: unpatched

Summary: NutzBoot vulnerable to information disclosure

Details:
A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. The impacted element is an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Ethereum Wallet Handler. Performing manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
GitHub Security Advisory: GHSA-fgmj-6h3v-4q56
Package: org.nutz:nutzboot-parent (MAVEN)
Severity: LOW (CVSS 3.7)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: <= 2.6.0-SNAPSHOT
Patched in: unpatched

Summary: NutzBoot vulnerable to deserialization

Details:
A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing manipulation can lead to deserialization. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been made available to the public and could be exploited.
GitHub Security Advisory: GHSA-wp4m-7hpj-8qp8
Package: tech.pegasys.discovery:discovery (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-323: Reusing a Nonce, Key Pair in Encryption, CWE-330: Use of Insufficiently Random Values
Vulnerable versions: < 0.4.5
Patched in: 0.4.5

Summary: Duplicate Advisory: Discovery uses the same AES/GCM Nonce throughout the session

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-w3hj-wr2q-x83g. This link is maintained to preserve external references.

### Original Description
Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.
GitHub Security Advisory: GHSA-5p82-2q3r-wj3m
Package: org.thingsboard:application (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 4.2.1
Patched in: 4.2.1

Summary: ThingsBoard allows an authenticated user to upload malicious SVG images

Details:
ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.
GitHub Security Advisory: GHSA-x832-fpvj-r5ph
Package: org.mustangproject:validator (MAVEN)
Severity: LOW (CVSS 2.8)
CWE: CWE-611: Improper Restriction of XML External Entity Reference
Vulnerable versions: < 2.16.3
Patched in: 2.16.3

Summary: Mustangproject allows exfiltrating files via XXE attacks

Details:
Mustang before 2.16.3 allows exfiltrating files via XXE attacks.
GitHub Security Advisory: GHSA-x832-fpvj-r5ph
Package: org.mustangproject:library (MAVEN)
Severity: LOW (CVSS 2.8)
CWE: CWE-611: Improper Restriction of XML External Entity Reference
Vulnerable versions: < 2.16.3
Patched in: 2.16.3

Summary: Mustangproject allows exfiltrating files via XXE attacks

Details:
Mustang before 2.16.3 allows exfiltrating files via XXE attacks.
GitHub Security Advisory: GHSA-932v-x9x2-vq29
Package: org.apache.hive:hive-metastore (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 4.1.0, < 4.2.0
Patched in: 4.2.0

Summary: Hive Metastore Server is vulnerable to SQL Injection

Details:
SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is accessible to only a handful of applications (e.g., Hiveserver2) thus the vulnerability is not exploitable. Moreover, the vulnerable code cannot be reached when metastore.try.direct.sql property is set to false.

This issue affects Apache Hive: from 4.1.0 before 4.2.0.

Users are recommended to upgrade to version 4.2.0, which fixes the issue. Users who cannot upgrade directly are encouraged to set metastore.try.direct.sql property to false if the HMS Thrift APIs are exposed to general public.
GitHub Security Advisory: GHSA-932v-x9x2-vq29
Package: org.apache.hive:hive-common (MAVEN)
Severity: HIGH (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 4.1.0, < 4.2.0
Patched in: 4.2.0

Summary: Hive Metastore Server is vulnerable to SQL Injection

Details:
SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is accessible to only a handful of applications (e.g., Hiveserver2) thus the vulnerability is not exploitable. Moreover, the vulnerable code cannot be reached when metastore.try.direct.sql property is set to false.

This issue affects Apache Hive: from 4.1.0 before 4.2.0.

Users are recommended to upgrade to version 4.2.0, which fixes the issue. Users who cannot upgrade directly are encouraged to set metastore.try.direct.sql property to false if the HMS Thrift APIs are exposed to general public.
GitHub Security Advisory: GHSA-53gx-j3p6-2rw9
Package: org.xwiki.platform:xwiki-platform-tool-jetty-resources (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 17.5.0, < 17.7.0
Patched in: 17.7.0

Summary: XWiki Jetty Package (XJetty) allows accessing any application file through URL

Details:
### Impact

In an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder.

It allows accessing files which might contains credentials, like http://myhots/webapps/xwiki/WEB-INF/xwiki.cfg, http://myhots/webapps/xwiki/WEB-INF/xwiki.properties or http://myhots/webapps/xwiki/WEB-INF/hibernate.cfg.xml.

### Patches

This has been patched in 16.10.11, 17.4.4, 17.7.0.

### Workarounds

The workaround is to modify the start_xwiki.sh script following https://github.com/xwiki/xwiki-platform/compare/8b68d8a70b43f25391b3ee48477d7eb71b95cf4b...99a04a0e2143583f5154a43e02174155da7e8e10.

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki.org](https://jira.xwiki.org/)
* Email us at [Security Mailing List](mailto:security@xwiki.org)

### Attribution

Vulnerability reported by Joseph Huber.
GitHub Security Advisory: GHSA-53gx-j3p6-2rw9
Package: org.xwiki.platform:xwiki-platform-tool-jetty-resources (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 17.0.0-rc-1, < 17.4.4
Patched in: 17.4.4

Summary: XWiki Jetty Package (XJetty) allows accessing any application file through URL

Details:
### Impact

In an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder.

It allows accessing files which might contains credentials, like http://myhots/webapps/xwiki/WEB-INF/xwiki.cfg, http://myhots/webapps/xwiki/WEB-INF/xwiki.properties or http://myhots/webapps/xwiki/WEB-INF/hibernate.cfg.xml.

### Patches

This has been patched in 16.10.11, 17.4.4, 17.7.0.

### Workarounds

The workaround is to modify the start_xwiki.sh script following https://github.com/xwiki/xwiki-platform/compare/8b68d8a70b43f25391b3ee48477d7eb71b95cf4b...99a04a0e2143583f5154a43e02174155da7e8e10.

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki.org](https://jira.xwiki.org/)
* Email us at [Security Mailing List](mailto:security@xwiki.org)

### Attribution

Vulnerability reported by Joseph Huber.
GitHub Security Advisory: GHSA-53gx-j3p6-2rw9
Package: org.xwiki.platform:xwiki-platform-tool-jetty-resources (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-284: Improper Access Control
Vulnerable versions: >= 16.7.0, < 16.10.11
Patched in: 16.10.11

Summary: XWiki Jetty Package (XJetty) allows accessing any application file through URL

Details:
### Impact

In an instance which is using the XWiki Jetty package (XJetty), a context is exposed to statically access any file located in the webapp/ folder.

It allows accessing files which might contains credentials, like http://myhots/webapps/xwiki/WEB-INF/xwiki.cfg, http://myhots/webapps/xwiki/WEB-INF/xwiki.properties or http://myhots/webapps/xwiki/WEB-INF/hibernate.cfg.xml.

### Patches

This has been patched in 16.10.11, 17.4.4, 17.7.0.

### Workarounds

The workaround is to modify the start_xwiki.sh script following https://github.com/xwiki/xwiki-platform/compare/8b68d8a70b43f25391b3ee48477d7eb71b95cf4b...99a04a0e2143583f5154a43e02174155da7e8e10.

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki.org](https://jira.xwiki.org/)
* Email us at [Security Mailing List](mailto:security@xwiki.org)

### Attribution

Vulnerability reported by Joseph Huber.
GitHub Security Advisory: GHSA-vrpq-qp53-qv56
Package: org.eclipse.jgit:org.eclipse.jgit (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-611: Improper Restriction of XML External Entity Reference
Vulnerable versions: < 5.13.4[PII_REDACTED]50-r
Patched in: 5.13.4[PII_REDACTED]50-r

Summary: Eclipse JGit XML External Entity (XXE) Vulnerability

Details:
In Eclipse JGit versions 7.2.0[PII_REDACTED]40-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.
GitHub Security Advisory: GHSA-vrpq-qp53-qv56
Package: org.eclipse.jgit:org.eclipse.jgit (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-611: Improper Restriction of XML External Entity Reference
Vulnerable versions: >= 6.1.0[PII_REDACTED]45-r, < 6.10.[PII_REDACTED]10-r
Patched in: 6.10.[PII_REDACTED]10-r

Summary: Eclipse JGit XML External Entity (XXE) Vulnerability

Details:
In Eclipse JGit versions 7.2.0[PII_REDACTED]40-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.
GitHub Security Advisory: GHSA-w88f-4875-99c8
Package: org.apache.druid:druid (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Vulnerable versions: < 35.0.0
Patched in: 35.0.0

Summary: Apache Druid’s Kerberos authenticator uses a weak fallback secret

Details:
Apache Druid’s Kerberos authenticator uses a weak fallback secret when the `druid.auth.authenticator.kerberos.cookieSignatureSecret` configuration is not explicitly set. In this case, the secret is generated using `ThreadLocalRandom`, which is not a crypto-graphically secure random number generator. This  may allow an attacker to predict or brute force the secret used to sign authentication cookies, potentially enabling token forgery or authentication bypass. Additionally, each process generates its own fallback secret, resulting in inconsistent secrets across nodes. This causes authentication failures in distributed or multi-broker deployments, effectively leading to a incorrectly configured clusters. Users are advised to configure a strong `druid.auth.authenticator.kerberos.cookieSignatureSecret`

This issue affects Apache Druid: through 34.0.0.

Users are recommended to upgrade to version 35.0.0, which fixes the issue making it mandatory to set `druid.auth.authenticator.kerberos.cookieSignatureSecret` when using the Kerberos authenticator. Services will fail to come up if the secret is not set.
GitHub Security Advisory: GHSA-8wf8-frjg-xv74
Package: lsfusion.platform:server (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 6.0-beta2
Patched in: unpatched

Summary: lsFusion Server is vulnerable to Path Traversal through its unpackFile function

Details:
A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack remotely.
GitHub Security Advisory: GHSA-93vm-mqpw-8wh3
Package: org.keycloak:keycloak-ldap-federation (MAVEN)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: < 26.4.6
Patched in: 26.4.6

Summary: Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization

Details:
### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-4hx9-48xh-5mxr. This link is maintained to preserve external references.

### Original Description

A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm administrator to trigger deserialization of untrusted Java objects via a malicious LDAP server configuration.