CWE-116 vulnerabilities

CVE-2024-50349 is a vulnerability in Git where the terminal prompt for credentials prints hostnames without properly encoding or escaping ANSI escape sequences. This can allow attackers to craft malicious URLs that manipulate the terminal display, potentially misleading users into providing credentials to attacker-controlled sites. The issue affects multiple Git versions and has been fixed in version 2.47.2 and later. Users are advised to upgrade to patched versions or avoid cloning from untrusted URLs.

CVE-2024-52006 is a low-severity vulnerability in Git involving improper encoding or escaping of output in the Git credential helper protocol. Certain ecosystems like .NET and node.js interpret single Carriage Return characters as newlines, which bypasses protections against a previous vulnerability (CVE-2020-5260). This flaw affects multiple Git versions prior to fixed releases. The issue is addressed in Git versions 2.47.2 and later. Users unable to upgrade should avoid cloning from untrusted URLs, especially recursive clones.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, CWE - 83 Improper Neutralization of Script in Attributes in a Web Page vulnerability in Veribilim Software Veribase Order allows Stored XSS, Cross-Site Scripting (XSS), Exploit Script-Based APIs, XSS Through HTTP Headers. This issue affects Veribase Order: before v4.010.3.

CVE-2024-38475 is a critical vulnerability in Apache HTTP Server 2.4.59 and earlier involving improper escaping of output in mod_rewrite. This flaw allows attackers to map URLs to filesystem locations that are permitted to be served but not intended to be directly reachable, potentially leading to code execution or source code disclosure. The issue affects substitutions in server context that use backreferences or variables as the first segment of the substitution. The rewrite flag "UnsafePrefixStat" can be used as a temporary measure to opt back in after ensuring constraints on substitutions.

In PHP versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.