deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-f2hf-pfrj-vrm7
Package: org.xwiki.contrib.oidc:oidc-authenticator (MAVEN)
Severity: CRITICAL (CVSS 0.0)
CWE: CWE-285: Improper Authorization
Vulnerable versions: >= 2.17.1, < 2.18.2
Patched in: 2.18.2

Summary: XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view

Details:
### Impact

Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user (since users are very commonly viewable, at least to other registered users).

### Patches

Version 2.18.2.

### Workarounds

The only workaround is to disable token access.

### References

* https://jira.xwiki.org/browse/OIDC-240
* https://github.com/xwiki-contrib/oidc/commit/d90d717172283aaa96bb5bb44e357f910ae64adb

### For more information

If you have any questions or comments about this advisory:
* Open an issue in [Jira XWiki.org](https://jira.xwiki.org/)
* Email us at [Security Mailing List](mailto:security@xwiki.org)
GitHub Security Advisory: GHSA-m49c-g9wr-hv6v
Package: com.hubspot.jinjava:jinjava (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
Vulnerable versions: < 2.7.5
Patched in: 2.7.5

Summary: jinjava has Sandbox Bypass via JavaType-Based Deserialization

Details:
### Summary

jinjava’s current sandbox restrictions prevent direct access to dangerous methods such as `getClass()`, and block instantiation of Class objects. However, these protections can be bypassed.

By using mapper.getTypeFactory().constructFromCanonical(), it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classes. This enables the creation of semi-arbitrary class instances without directly invoking restricted methods or class literals.

As a result, an attacker can escape the sandbox and instantiate classes such as java.net.URL, opening up the ability to access local files and URLs(e.g., file:///etc/passwd). With further chaining, this primitive can potentially lead to remote code execution (RCE).

### Details

jinjava templates expose a built-in variable `____int3rpr3t3r____`, which provides direct access to the jinjavaInterpreter instance.
This variable was previously abused and protections were added to prevent call method from `JinjavaInterpreter` instances (see [Add interpreter to blacklist](https://github.com/HubSpot/jinjava/commit/1b9aaa4b420c58b4a301cf4b7d26207f1c8d1165)).
However, interacting with the properties of `JinjavaInterpreter` instances remains [unrestricted](https://github.com/HubSpot/jinjava/blob/jinjava-2.8.0/src/main/java/com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java#L80-L84).

From `____int3rpr3t3r____`, it is possible to traverse to the `config` field, which exposes an ObjectMapper. By invoking `readValue(String content, JavaType valueType)` on this ObjectMapper, an attacker can instantiate arbitrary classes specified via `JavaType`.

Although jinjava explicitly restricts dangerous classes such as `Class`, `ClassLoader`, and so on inside `JinjavaBeanELResolver`, the `JavaType` class itself is [not restricted](https://github.com/HubSpot/jinjava/blob/jinjava-2.8.0/src/main/java/com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java#L246-L262). 

As a result, an attacker can leverage `JavaType` construction (`constructFromCanonical`) to instantiate semi-arbitrary classes without directly calling restricted methods.

This allows sandbox escape and the creation of powerful primitives. 

### Impact
Escape the Jinjava sandbox and instantiate a wide range of classes using JavaType.
This capability can be used to read arbitrary files and to perform full read SSRF by creating network-related objects.
In certain environments, depending on the available classes, this primitive can even lead to complete remote code execution.
GitHub Security Advisory: GHSA-m49c-g9wr-hv6v
Package: com.hubspot.jinjava:jinjava (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
Vulnerable versions: = 2.8.0
Patched in: 2.8.1

Summary: jinjava has Sandbox Bypass via JavaType-Based Deserialization

Details:
### Summary

jinjava’s current sandbox restrictions prevent direct access to dangerous methods such as `getClass()`, and block instantiation of Class objects. However, these protections can be bypassed.

By using mapper.getTypeFactory().constructFromCanonical(), it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classes. This enables the creation of semi-arbitrary class instances without directly invoking restricted methods or class literals.

As a result, an attacker can escape the sandbox and instantiate classes such as java.net.URL, opening up the ability to access local files and URLs(e.g., file:///etc/passwd). With further chaining, this primitive can potentially lead to remote code execution (RCE).

### Details

jinjava templates expose a built-in variable `____int3rpr3t3r____`, which provides direct access to the jinjavaInterpreter instance.
This variable was previously abused and protections were added to prevent call method from `JinjavaInterpreter` instances (see [Add interpreter to blacklist](https://github.com/HubSpot/jinjava/commit/1b9aaa4b420c58b4a301cf4b7d26207f1c8d1165)).
However, interacting with the properties of `JinjavaInterpreter` instances remains [unrestricted](https://github.com/HubSpot/jinjava/blob/jinjava-2.8.0/src/main/java/com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java#L80-L84).

From `____int3rpr3t3r____`, it is possible to traverse to the `config` field, which exposes an ObjectMapper. By invoking `readValue(String content, JavaType valueType)` on this ObjectMapper, an attacker can instantiate arbitrary classes specified via `JavaType`.

Although jinjava explicitly restricts dangerous classes such as `Class`, `ClassLoader`, and so on inside `JinjavaBeanELResolver`, the `JavaType` class itself is [not restricted](https://github.com/HubSpot/jinjava/blob/jinjava-2.8.0/src/main/java/com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java#L246-L262). 

As a result, an attacker can leverage `JavaType` construction (`constructFromCanonical`) to instantiate semi-arbitrary classes without directly calling restricted methods.

This allows sandbox escape and the creation of powerful primitives. 

### Impact
Escape the Jinjava sandbox and instantiate a wide range of classes using JavaType.
This capability can be used to read arbitrary files and to perform full read SSRF by creating network-related objects.
In certain environments, depending on the available classes, this primitive can even lead to complete remote code execution.
GitHub Security Advisory: GHSA-h952-963h-rv99
Package: org.pytorch:executorch-android (MAVEN)
Severity: HIGH (CVSS 8.1)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: <= 0.6.0
Patched in: 0.7.0-rc1

Summary: ExecuTorch vulnerable to Heap-based Buffer Overflow attack

Details:
A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f
GitHub Security Advisory: GHSA-84m3-f99p-cqx5
Package: org.pytorch:executorch-android (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: < 0.7.0
Patched in: 0.7.0

Summary: ExecuTorch integer overflow vulnerability

Details:
An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73.
GitHub Security Advisory: GHSA-hj95-mhgf-jxc4
Package: org.pytorch:executorch-android (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: < 0.7.0
Patched in: 0.7.0

Summary: ExecuTorch integer overflow vulnerability

Details:
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006.
GitHub Security Advisory: GHSA-xc7w-r669-48pf
Package: org.pytorch:executorch-android (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 0.7.0
Patched in: 0.7.0

Summary: ExecuTorch vulnerable to Heap-based Buffer Overflow

Details:
A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.
GitHub Security Advisory: GHSA-9m39-3mf3-xwch
Package: org.pytorch:executorch-android (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 0.7.0
Patched in: 0.7.0

Summary: ExecuTorch heap buffer overflow vulnerability

Details:
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
GitHub Security Advisory: GHSA-f9hx-c6jf-3qxm
Package: org.pytorch:executorch-android (MAVEN)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 0.7.0
Patched in: 0.7.0

Summary: ExecuTorch out-of-bounds access vulnerability

Details:
An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit fb03b6f85596a8f954d[PII_REDACTED]5255b6a58d4.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin-server (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin-ops-server (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin-core-metadata (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin-core-common (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin-common-service (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin-common-server (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-f6m8-qm7j-fh65
Package: org.apache.kylin:kylin (MAVEN)
Severity: HIGH (CVSS 7.3)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Details:
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-mm3m-5497-xggg
Package: org.elasticsearch:elasticsearch (MAVEN)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: >= 8.0.0-alpha1, < 8.16.0
Patched in: 8.16.0

Summary: Elasticsearch Uncontrolled Resource Consumption Vulnerability

Details:
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.
GitHub Security Advisory: GHSA-mm3m-5497-xggg
Package: org.elasticsearch:elasticsearch (MAVEN)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 7.17.25
Patched in: 7.17.25

Summary: Elasticsearch Uncontrolled Resource Consumption Vulnerability

Details:
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.
GitHub Security Advisory: GHSA-5gj6-62g7-vmgf
Package: com.hazelcast:hazelcast (MAVEN)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 5.3.0-BETA-1, < 5.3.0
Patched in: 5.3.0

Summary: Hazelcast vulnerable to unmasked password exposure

Details:
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
GitHub Security Advisory: GHSA-5gj6-62g7-vmgf
Package: com.hazelcast:hazelcast (MAVEN)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 5.2-BETA-1, < 5.2.4
Patched in: 5.2.4

Summary: Hazelcast vulnerable to unmasked password exposure

Details:
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
GitHub Security Advisory: GHSA-5gj6-62g7-vmgf
Package: com.hazelcast:hazelcast (MAVEN)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 5.1-BETA-1, < 5.1.6
Patched in: 5.1.6

Summary: Hazelcast vulnerable to unmasked password exposure

Details:
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
GitHub Security Advisory: GHSA-5gj6-62g7-vmgf
Package: com.hazelcast:hazelcast (MAVEN)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 5.0-BETA-1, < 5.0.5
Patched in: 5.0.5

Summary: Hazelcast vulnerable to unmasked password exposure

Details:
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
GitHub Security Advisory: GHSA-5gj6-62g7-vmgf
Package: com.hazelcast:hazelcast (MAVEN)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-522: Insufficiently Protected Credentials
Vulnerable versions: >= 4.0-BETA-1, <= 4.2.8
Patched in: unpatched

Summary: Hazelcast vulnerable to unmasked password exposure

Details:
In Hazelcast before 5.3.0, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.
GitHub Security Advisory: GHSA-mr9j-4j48-xcm2
Package: org.apache.kylin:kylin-core-common (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Authentication Bypass Vulnerability

Details:
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-mr9j-4j48-xcm2
Package: org.apache.kylin:kylin (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-288: Authentication Bypass Using an Alternate Path or Channel
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Authentication Bypass Vulnerability

Details:
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin-server (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin-ops-server (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin-core-metadata (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin-core-common (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin-common-service (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin-common-server (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-p86w-w5rh-m3hx
Package: org.apache.kylin:kylin (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-552: Files or Directories Accessible to External Parties
Vulnerable versions: >= 4.0.0, < 5.0.3
Patched in: 5.0.3

Summary: Apache Kylin Files or Directories Accessible to External Parties

Details:
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
 You are fine as long as the Kylin's system and project admin access is well protected.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.
GitHub Security Advisory: GHSA-qh92-cr5f-3595
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 7.4.0-ga1, < 7.4.3.113-ga113
Patched in: 7.4.3.113-ga113

Summary: Liferay Portal Vulnerable to XSS in Web Content translation

Details:
Stored Cross-site Scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allow remote attackers to inject arbitrary web script or HTML via any rich text field in a web content article.