CVE Vulnerability Catalog

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the decode_image function of the file metagpt/utils/common.py. Manipulation of the img_url_or_b64 argument results in server-side request forgery. The attack can be launched remotely and the exploit has been released to the public. The project was informed but has not responded.

A Cross-site Scripting (XSS) vulnerability was identified in the from_dict method of the AppLollmsMessage class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of sanitization or HTML encoding of the content field when deserializing user-provided data, allowing an attacker to inject malicious HTML or JavaScript payloads executed in another user's browser. Exploitation can lead to account takeover, session hijacking, or wormable attacks.

In MetaGPT up to 0.8.1, the evaluateCode function in metagpt/environment/minecraft/mineflayer/index.js (Mineflayer HTTP API component) allows cross-site request forgery. The attack can be performed remotely and the exploit has been publicly disclosed.

A vulnerability was found in 1Panel-dev MaxKB up to 2.6.1 in the execute function of apps/application/flow/step_node/mcp_node/impl/base_mcp_node.py within the Model Context Protocol Node component. Manipulation results in OS command injection, and the attack can be carried out remotely. The exploit has been made public and could be used; the vendor responded professionally and quickly released a fixed version.

Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.

Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. _pack_ipv6() includes the sentinel byte from _pack_ipv4(), producing an 18-byte value instead of 17 bytes, causing incorrect results in mask operations and in find()/bin_find().

User interface (UI) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. The vulnerability involves misleading the user through a distorted interface.

A user interface issue in Microsoft Edge (Chromium-based) can lead to misrepresentation of critical information. This allows an unauthorized attacker to perform spoofing over a network.

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. Configured ClaimMapper and Authorizer were bypassed for the AdminService/StreamWorkflowReplicationMessages endpoint, allowing unauthenticated access.

ClearanceKit versions prior to 5.0.4-beta-1f46165 have a flaw in the Endpoint Security event handler where only the source path of dual-path file operations is checked, and the destination path is ignored. This allows any local process to bypass file-access protection using rename, link, copyfile, exchangedata, or clone operations.

In the LangSmith JavaScript/TypeScript SDK (langsmith) prior to version 0.5.18, an incomplete prototype pollution fix was found. The baseAssignValue() function only guards against the __proto__ key but fails to prevent traversal via constructor.prototype, allowing an attacker who controls keys in data processed by the createAnonymizer() API to pollute Object.prototype and affect all objects in the Node.js process.

A vulnerability in Axios versions prior to 1.15.0 and 0.3.1 allows a gadget-style attack chain where prototype pollution in a third-party dependency can be leveraged to inject unsanitized header values into outbound HTTP requests.

An SSRF vulnerability in GeoNode versions 4.4.5 and 5.0.2 (and prior) allows authenticated attackers to send outbound network requests to arbitrary URLs by submitting a crafted service URL during form validation. Insufficient IP filtering in the WMS service handler enables probing of internal network resources, including loopback addresses, RFC1918 private ranges, link-local addresses, and cloud metadata services.

An SSRF vulnerability in GeoNode allows authenticated users with document upload permissions to send arbitrary HTTP requests by providing a malicious URL in the doc_url parameter. Attackers can target internal network resources, loopback addresses, RFC1918 addresses, or cloud metadata services.

The base64.b64decode() and related functions stop decoding after encountering the first padded quad, even if more data remains. This can lead to acceptance of data that other implementations may process differently. Use validate=True to enforce stricter base64 processing.

In Chamilo LMS prior to 1.11.38 and 2.0.0-RC.3, multiple files use simplexml_load_string() without XXE protection. With the LIBXML_NOENT flag, arbitrary server files can be read.

Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, any authenticated user (including ROLE_STUDENT) can enumerate all platform users and access personal information (email, phone, roles) via GET /api/users, including administrator accounts. This vulnerability is fixed in 2.0.0-RC.3.

Chamilo LMS is a learning management system. Prior to 1.11.38, the get_user_info_from_username REST API endpoint returns personal information (email, first name, last name, user ID, active status) of any user to any authenticated user, including students. There is no authorization check. This vulnerability is fixed in 1.11.38.

Chamilo LMS prior to 1.11.38 allows unauthenticated access to Twig template files (.tpl) under /main/template/default/ via HTTP GET requests. These templates expose internal application logic, variable names, AJAX endpoint URLs, and admin panel structure.

Chamilo LMS prior to 2.0.0-RC.3 contains an IDOR vulnerability in the /social-network/personal-data/{userId} endpoint that lets any authenticated user access full personal data and API tokens of arbitrary users by modifying the userId parameter, resulting in mass disclosure of sensitive information and credentials.