Vulnerabilidades

*** Pendiente de traducción *** Affected Products and Versions<br /> * Apache Druid<br /> * Affected Versions: 0.17.0 through 35.x (all versions prior to 36.0.0)<br /> * Prerequisites: * druid-basic-security extension enabled<br /> * LDAP authenticator configured<br /> * Underlying LDAP server permits anonymous bind                                                                                                                                                   <br /> <br /> <br /> <br /> <br /> <br /> <br /> Vulnerability Description<br /> <br /> An authentication bypass vulnerability exists in Apache Druid when using the druid-basic-security extension with LDAP authentication. If the underlying LDAP server is configured to allow anonymous<br /> binds, an attacker can bypass authentication by providing an existing username with an empty password. This allows unauthorized access to otherwise restricted Druid resources without valid credentials.<br /> <br /> The vulnerability stems from improper validation of LDAP authentication responses when anonymous binds are permitted, effectively treating anonymous bind success as valid user authentication. <br /> <br /> Impact<br /> <br /> A remote, unauthenticated attacker can:<br /> * Gain unauthorized access to the Apache Druid cluster<br /> * Access sensitive data stored in Druid datasources<br /> * Execute queries and potentially manipulate data<br /> * Access administrative interfaces if the bypassed account has elevated privileges<br /> * Completely compromise the confidentiality, integrity, and availability of the Druid deployment                                                                                                                                                                                    <br /> <br /> <br /> Mitigation<br />  <br /> Immediate Mitigation (No Druid Upgrade Required):                                                                                                                                                   <br /> * Disable anonymous bind on your LDAP server. This prevents the vulnerability from being exploitable and is the recommended immediate action.<br /> <br /> <br /> <br /> Resolution<br /> * Upgrade Apache Druid to version 36.0.0 or later, which includes fixes to properly reject anonymous LDAP bind attempts.

*** Pendiente de traducción *** Improper Neutralization of Data within XPath Expressions (&amp;#39;XPath Injection&amp;#39;) vulnerability in Apache HertzBeat.<br /> <br /> This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.<br /> <br /> Users are recommended to upgrade to version 1.8.0, which fixes the issue.

*** Pendiente de traducción *** A vulnerability has been identified in Simcenter Femap (All versions

*** Pendiente de traducción *** A vulnerability has been identified in NX (All versions

*** Pendiente de traducción *** A vulnerability has been identified in Simcenter Femap (All versions

*** Pendiente de traducción *** A vulnerability has been identified in Simcenter Femap (All versions

*** Pendiente de traducción *** A vulnerability has been identified in Simcenter Femap (All versions

*** Pendiente de traducción *** A vulnerability has been identified in Simcenter Femap (All versions

*** Pendiente de traducción *** A vulnerability has been identified in Simcenter Femap (All versions

*** Pendiente de traducción *** A vulnerability has been identified in Polarion V2404 (All versions

*** Pendiente de traducción *** The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via double HTML-entity encoding in all versions up to, and including, 1.32.0. This is due to the plugin&amp;#39;s sanitization function calling `html_entity_decode()` before `wp_kses()`, and then calling `html_entity_decode()` again on output. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the &amp;#39;name_directory_name&amp;#39; and &amp;#39;name_directory_description&amp;#39; parameters in the public submission form granted they can trick the site administrator into approving their submission or auto-publish is enabled.

*** Pendiente de traducción *** The The Events Calendar Shortcode &amp; Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&amp;#39;s `ecs-list-events` shortcode `message` attribute in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.