漏洞公告

OpenStack Keystone has an Incorrect Authorization issue

OpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential

OpenStack Keystone has an Authorization Bypass

Pimcore Platform - SQL Injection in DataObject composite index handling during class definition import/save

FUXA provides guest and invalid-token access to protected read APIs in secure mode

Shamefile has an arbitrary file read via shamefile.yaml in shame next

nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`

symfony/polyfill-intl-idn: xn-- labels with ASCII-only Punycode payloads are treated as equivalent to their decoded form

local-deep-research has an SSRF bypass in `safe_get`

compliance-trestle Vulnerable to Remote Code Execution via Recursive Server-Side Template Injection (SSTI)

OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens

Casdoor doesn't enforce SAML assertion time bounds

Casdoor SAML callback handler accepts any well-formed SAMLResponse sent to /api/acs without verifying that it corresponds to an AuthnRequest

Casdoor allows users to bypass configured MFA requirements

Casdoor has an authentication bypass

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check

Calico Inserts Sensitive Information into Log File

Casdoor does not validate the AudienceRestriction element in SAML assertions

Calico Inserts Sensitive Information into Log File

Casdoor doesn't verify that a JWT used for token exchange is still active

Calico Inserts Sensitive Information into Log File

compliance-trestle Vulnerable to SSRF in Remote Fetching Subsystem

OpenCTI: Privilege escalation via graphQL API is abusable by organization admins, due to incorrect ACL on userEdit relationAdd