Threats Tagged 'ubuntu-pro-26-04-lts'

A SQL injection vulnerability exists in SOGo versions prior to 5.12.7 that allows authenticated users to execute arbitrary SQL statements via the search parameter of the allContactSearch endpoint. This vulnerability affects multiple specific versions of SOGo as listed. Exploitation could lead to unauthorized data access and modification. No known exploits in the wild have been reported. Patch status is not confirmed in the provided data.

A SQL injection vulnerability exists in SOGo versions prior to 5.12.7 that allows authenticated users to execute arbitrary SQL statements via the newPassword parameter in the password change functionality. This vulnerability affects multiple specific versions of SOGo as listed. Exploitation can lead to confidentiality, integrity, and availability impacts. No official patch or vendor advisory is provided in the input data.

An improper authorization vulnerability exists in Apache Tomcat when multiple method constraints define an HTTP method for the same extension. This affects multiple Apache Tomcat versions from 7.0.0 through 11.0.21. The vulnerability allows unauthorized access due to incorrect enforcement of HTTP method constraints. Fixed versions include 11.0.22, 10.1.55, and 9.0.118.

A denial-of-service vulnerability exists in the Python IDNA library versions prior to 3.15, where specially crafted inputs to the idna.encode() function can cause excessive resource consumption due to delayed length validation. This issue was partially addressed in version 3.14 and more comprehensively in 3.15. The vulnerability is triggered by unusually large inputs that exceed normal domain name lengths. Enforcing the domain name length limit of 253 characters before calling idna.encode() can mitigate the issue.

Twig, a PHP template language, has a vulnerability in its sandbox prior to version 3.26.0 where it does not prevent templates from consuming excessive CPU, memory, or wall-clock time. This allows untrusted templates to cause resource exhaustion. The issue is addressed in version 3.26.0 by clarifying that the sandbox does not protect against resource exhaustion.

Twig, a PHP template language, has a vulnerability in versions prior to 3.26.0 where the deprecated spaceless filter is incorrectly registered as safe for HTML. This causes the autoescaping feature to emit attacker-controlled markup unescaped when spaceless is applied to untrusted input. The issue is resolved in version 3.26.0.

Twig, a PHP template language, prior to version 3.26.0, memoizes IntlDateFormatter and NumberFormatter instances keyed by template-controlled filter arguments. This allows a template to allocate many ICU formatter objects that remain in memory for the lifetime of the Twig\Environment. The issue is fixed in version 3.26.0.

Twig, a PHP template language, has a vulnerability in versions prior to 3.26.0 where the Compiler::string() method does not escape single quotes in template names used in {% use %} tags inside PHP single-quoted string literals. This flaw allows crafted template names to break out of the string context and inject arbitrary PHP code into the compiled cache file. The issue is fixed starting with version 3.26.0.

A vulnerability in the Twig PHP template engine versions from 3.9.0 up to but not including 3.26.0 allows sandboxed templates to bypass security policy enforcement. The issue arises because template_from_string() compiles inner templates under synthesized names that can fall outside the sandbox's SourcePolicyInterface decision. This enables a sandboxed template to call template_from_string and include to render an inner template without applying the sandbox security policy. The vulnerability is fixed in version 3.26.0.

A vulnerability in the Twig PHP template language prior to version 3.26.0 allows an untrusted template author to read object properties that are not in the sandbox allowlist. This occurs because the column filter passes object arrays to PHP's array_column() function, which accesses public and magic properties without sandbox checks. The issue is fixed in Twig version 3.26.0.