Security issues on SysPass 3.2.x

[sysentr0py]

Hi, I recently emailed security@syspass.org to report some security issues. Could you please take a look and give me feedback? Thank you very much.

[sser36]

I don't think the system is being actively updated anymore. CVE-2024-42904

[sysentr0py]

Ye, I gave it a shot.

[Nebucatnetzer]

Thanks for posting it here.

[zezar98]

Hi, I recently emailed security@syspass.org to report some security issues. Could you please take a look and give me feedback? Thank you very much.

I don't think the system is being actively updated anymore. CVE-2024-42904

Hi @sysentr0py and @sser36 , I tried to reproduce the issue, but it works fine for me. Have you tried to reproduce it?

This is the info of my test:

We're using php 7.4.33 and this is the syspass version info