CVE Vulnerability Advisory Database

[Affected Scope] Apache HTTP Server versions 2.4.59 and earlier, specifically environments utilizing mod_rewrite rules where substitutions in server context use backreferences or variables as the first segment.

[Impact] Attackers can map URLs to restricted filesystem locations, leading to unauthorized source code disclosure or arbitrary code execution (RCE).

[Mitigation] Immediately upgrade Apache HTTP Server to version 2.4.60 or later, and review/restrict unsafe RewriteRules.

[Affected Scope] All default installations of GeoServer prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the host server via manipulated OGC request parameters

[Mitigation] Immediately upgrade to patched versions (2.22.6, 2.23.6, 2.24.4, 2.25.2 or higher) or apply the workaround by removing the 'gt-complex' JAR file

[Affected Scope] Progress WhatsUp Gold versions prior to 2023.1.3

[Impact] Unauthenticated remote attackers can execute arbitrary commands with 'iisapppool\ mconsole' privileges, leading to full system compromise

[Mitigation] Immediately upgrade WhatsUp Gold to version 2023.1.3 or later and restrict external access

[Affected Scope] Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier

[Impact] Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files and potentially achieve Remote Code Execution (RCE)

[Mitigation] Apply the official Adobe security patches (APSB24-40) or upgrade to the latest secure releases immediately

[Affected Scope] PHP versions 8.1.x (before 8.1.29), 8.2.x (before 8.2.20), and 8.3.x (before 8.3.8) running on Windows with Apache and PHP-CGI configuration under specific system code pages

[Impact] Unauthenticated remote attackers can inject arbitrary command-line options into the PHP binary, leading to remote code execution (RCE) and source code disclosure

[Mitigation] Immediately upgrade to patched PHP versions (8.1.29, 8.2.20, 8.3.8 or later) or apply Apache Rewrite rules to block malicious query strings

[Affected Scope] Rejetto HTTP File Server (HFS) up to and including version 2.3m

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by sending a specially crafted HTTP request

[Mitigation] Immediately discontinue the use of HFS 2.x, migrate to the completely redesigned HFS 3, or restrict network access

[Affected Scope] Progress Telerik Report Server 2024 Q1 (10.0.24.305) and earlier versions hosted on IIS

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms to gain administrative access, access restricted functionality, or potentially execute arbitrary code

[Mitigation] Immediately upgrade Telerik Report Server to the latest secure version (2024 Q2 10.1.24.514 or later) and restrict IIS access to trusted IPs

[Affected Scope] All versions of CrushFTP prior to 10.7.1 and 11.1.0 across all operating system platforms

[Impact] Unauthenticated remote attackers can bypass the VFS Sandbox, read arbitrary files from the filesystem, bypass authentication to gain administrative access, and execute arbitrary code on the server.

[Mitigation] Immediately upgrade CrushFTP to the patched versions (10.7.1 or 11.1.0 or higher) and apply WAF rules to block template injection payloads.

[Affected Scope] Apache HugeGraph-Server versions from 1.0.0 before 1.3.0 running on Java 8 & Java 11

[Impact] Unauthenticated remote attackers can bypass security controls and execute arbitrary system commands via the Gremlin query engine, leading to full system compromise

[Mitigation] Upgrade Apache HugeGraph-Server to version 1.3.0 or higher with Java 11, and ensure the Authentication system is enabled

[Affected Scope] Palo Alto Networks PAN-OS 10.2, 11.0, and 11.1 firewalls with GlobalProtect gateway or portal enabled

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the firewall via specially crafted requests

[Mitigation] Immediately apply the official PAN-OS hotfix, or implement temporary workarounds such as disabling Device Telemetry or applying Threat Prevention signatures

[Affected Scope] All firmware versions of legacy D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L.

[Impact] Remote unauthenticated attackers can bypass authentication using hard-coded credentials, leading to complete system compromise and arbitrary code execution.

[Mitigation] Since these devices are End-of-Life (EOL) and will not receive security patches, they must be immediately decommissioned and replaced.

[Affected Scope] All JetBrains TeamCity versions prior to 2023.11.4

[Impact] Unauthenticated remote attackers can completely bypass authentication mechanisms to gain administrative privileges, leading to full server compromise and arbitrary remote code execution (RCE)

[Mitigation] Immediately upgrade TeamCity server to version 2023.11.4 or later, or apply the official security patch plugin

[Affected Scope] Progress Kemp LoadMaster OS (LMOS) versions prior to 7.2.48.10, 7.2.54.8, and 7.2.59.2

[Impact] Unauthenticated remote attackers can access the system via the management interface to execute arbitrary OS commands and gain full system control

[Mitigation] Immediately upgrade to patched LMOS versions (7.2.59.2, 7.2.54.8, 7.2.48.10 or higher) and restrict external access to the management interface

[Affected Scope] ConnectWise ScreenConnect versions 23.9.7 and prior

[Impact] Attackers can bypass authentication to create administrative accounts, leading to full system compromise and Remote Code Execution (RCE) [1, 1.1]

[Mitigation] Immediately upgrade to the patched version (23.9.8 or higher) and restrict external access to the management interface

[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions

[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets

[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround

[Affected Scope] FortiOS versions 6.0 through 7.4.2 and FortiProxy versions 1.0 through 7.4.2 with SSL-VPN service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands on the target system via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched firmware versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] Older versions of Atlassian Confluence Data Center and Server (8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, 8.5.0-8.5.3)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands (RCE) on the affected instance by sending specially crafted HTTP requests.

[Mitigation] Immediately upgrade to the latest patched versions (8.5.4+ or newer LTS releases) provided by Atlassian.

[Affected Scope] Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) gateway appliances

[Impact] An authenticated administrator can send specially crafted HTTP requests to execute arbitrary OS commands with root privileges, leading to full appliance compromise

[Mitigation] Apply the official vendor security patches immediately, or import the temporary mitigation XML file provided by Ivanti to block vulnerable API endpoints

[Affected Scope] Qlik Sense Enterprise for Windows (prior to specified patch levels)

[Impact] Unauthenticated remote attackers can elevate privileges and execute arbitrary code on the backend repository server via HTTP request tunneling.

[Mitigation] Immediately apply the official security patches (August 2023 Patch 2 or later, etc.) provided by the vendor.

[Affected Scope] All self-hosted versions of Confluence Data Center and Server. (Atlassian Cloud sites are not affected)

[Impact] Unauthenticated remote attackers can reset Confluence setup states and create unauthorized administrator accounts, leading to a complete compromise of confidentiality, integrity, and availability.

[Mitigation] Immediately upgrade to the latest patched versions or restrict external access to the setup endpoints (/setup/*) via reverse proxy or WAF configurations.