Description
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.
Remediation
References
Related Vulnerabilities
WordPress Plugin Convert Docx2post Arbitrary File Upload (1.4)
WordPress Plugin Catch Import Export Security Bypass (1.8)
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2022-47927)
MediaWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-8857)