BlueSpice Helpdesk - Recent changes [en]

Security:Security Advisories

Rvogel1 — Mon, 08 Jun 2026 09:06:59 GMT

← Older revision		Revision as of 09:06, 8 June 2026
Line 6:		Line 6:
	! style="" \|Summary		! style="" \|Summary
	!Severity		!Severity
			\|-
			\|[[Security:Security Advisories/BSSA-2026-03\|BSSA-2026-03]]
			\|2026-06-08
			\|Security vulnerabilities in containers of the Cloudogu stack
			\|[https://nvd.nist.gov/vuln/detail/CVE-2026-31789 CVE-2026-31789], [https://nvd.nist.gov/vuln/detail/CVE-2026-43512 CVE-2026-43512], [https://nvd.nist.gov/vuln/detail/CVE-2026-7261 CVE-2026-7261]
			\|Heap buffer overflow in OpenSSL, Apache Tomcat DIGEST authentication bypass and PHP SOAP server session persistence vulnerability
			\| style="" class="col-green-bg" \|Low
	\|-		\|-
	\|[[Security:Security Advisories/BSSA-2026-02\|BSSA-2026-02]]		\|[[Security:Security Advisories/BSSA-2026-02\|BSSA-2026-02]]

Security:Security Advisories/BSSA-2026-03

Rvogel1 — Mon, 08 Jun 2026 09:02:50 GMT

← Older revision		Revision as of 09:02, 8 June 2026
Line 21:		Line 21:
	* [https://nvd.nist.gov/vuln/detail/CVE-2026-43512 CVE-2026-43512]		* [https://nvd.nist.gov/vuln/detail/CVE-2026-43512 CVE-2026-43512]
	* [https://nvd.nist.gov/vuln/detail/CVE-2026-7261 CVE-2026-7261]		* [https://nvd.nist.gov/vuln/detail/CVE-2026-7261 CVE-2026-7261]
	\|-
	~~\|Validated by~~
	~~\|RV, FS~~
	\|}		\|}

Line 32:		Line 29:
	!'''Type of vulnerability'''		!'''Type of vulnerability'''
	!'''BlueSpice 5'''		!'''BlueSpice 5'''
	~~!'''BlueSpice 4'''~~
	\|-		\|-
	\|CVE-2026-31789		\|CVE-2026-31789
	\|<code>hallowelt/bluespice-mathoid</code>, <code>hallowelt/bluespice-collabpadsbackend</code>, <code>hallowelt/mongodb</code>		\|<code>hallowelt/bluespice-mathoid</code>, <code>hallowelt/bluespice-collabpadsbackend</code>, <code>hallowelt/mongodb</code>
	\|Heap Buffer Overflow (OpenSSL, 32-bit only)		\|Heap Buffer Overflow (OpenSSL, 32-bit only)
	~~\| style="" class="col-green-bg" \|not affected~~
	\| style="" class="col-green-bg" \|not affected		\| style="" class="col-green-bg" \|not affected
	\|-		\|-
Line 43:		Line 38:
	\|<code>hallowelt/bluespice-pdfrenderer</code>, <code>hallowelt/drawio</code>		\|<code>hallowelt/bluespice-pdfrenderer</code>, <code>hallowelt/drawio</code>
	\|Authentication Bypass (Apache Tomcat DIGEST)		\|Authentication Bypass (Apache Tomcat DIGEST)
	~~\| style="" class="col-green-bg" \|not affected~~
	\| style="" class="col-green-bg" \|not affected		\| style="" class="col-green-bg" \|not affected
	\|-		\|-
Line 49:		Line 43:
	\|<code>hallowelt/bluespice</code>		\|<code>hallowelt/bluespice</code>
	\|PHP SOAP Server Session Persistence		\|PHP SOAP Server Session Persistence
	~~\| style="" class="col-green-bg" \|not affected~~
	\| style="" class="col-green-bg" \|not affected		\| style="" class="col-green-bg" \|not affected
	\|}		\|}

Security:Security Advisories/BSSA-2026-03

Rvogel1 — Mon, 08 Jun 2026 09:00:07 GMT

Created page with "{| class="wikitable" |+ ! ! |- |Date |2026-06-08 |- |Severity |reported "medium/high", BlueSpice assessment: '''not affected''' |- |Affected |Cloudogu Container Images (library present, not exploitable) |- |Fixed in |Next regular update |- |CVE | * [https://nvd.nist.gov/vuln/detail/CVE-2026-31789 CVE-2026-31789] * [https://nvd.nist.gov/vuln/detail/CVE-2026-43512 CVE-2026-43512] * [https://nvd.nist.gov/vuln/detail/CVE-2026-7261 CVE-2026-7261] |- |Validated by |RV, FS |}..."

New page

{| class="wikitable"
|+
!
!
|-
|Date
|2026-06-08
|-
|Severity
|reported "medium/high", BlueSpice assessment: '''not affected'''
|-
|Affected
|Cloudogu Container Images (library present, not exploitable)
|-
|Fixed in
|Next regular update
|-
|CVE
|
* [https://nvd.nist.gov/vuln/detail/CVE-2026-31789 CVE-2026-31789]
* [https://nvd.nist.gov/vuln/detail/CVE-2026-43512 CVE-2026-43512]
* [https://nvd.nist.gov/vuln/detail/CVE-2026-7261 CVE-2026-7261]
|-
|Validated by
|RV, FS
|}

==Problem==
{| class="wikitable"
!'''CVE'''
!'''Component'''
!'''Type of vulnerability'''
!'''BlueSpice 5'''
!'''BlueSpice 4'''
|-
|CVE-2026-31789
|<code>hallowelt/bluespice-mathoid</code>, <code>hallowelt/bluespice-collabpadsbackend</code>, <code>hallowelt/mongodb</code>
|Heap Buffer Overflow (OpenSSL, 32-bit only)
| style="" class="col-green-bg" |not affected
| style="" class="col-green-bg" |not affected
|-
|CVE-2026-43512
|<code>hallowelt/bluespice-pdfrenderer</code>, <code>hallowelt/drawio</code>
|Authentication Bypass (Apache Tomcat DIGEST)
| style="" class="col-green-bg" |not affected
| style="" class="col-green-bg" |not affected
|-
|CVE-2026-7261
|<code>hallowelt/bluespice</code>
|PHP SOAP Server Session Persistence
| style="" class="col-green-bg" |not affected
| style="" class="col-green-bg" |not affected
|}

==Impact assessment==
{| class="wikitable" style="width: 100%;"
!CVE
!Assessment
!Mitigation without update
|-
| style="vertical-align:middle;text-align:left;" |CVE-2026-31789
| style="vertical-align:middle;text-align:left;" class="col-green-bg" |Not affected. The vulnerability only applies to 32-bit platforms. Additionally, the way OpenSSL is used in the affected container images does not expose any exploitable attack surface.
| style="vertical-align:middle;text-align:left;" |No action required.
|-
| style="vertical-align:middle;text-align:left;" |CVE-2026-43512
| style="vertical-align:middle;text-align:left;" class="col-green-bg" |Not affected. Neither <code>bluespice-pdfrenderer</code> nor <code>drawio</code> use DIGEST authentication. Access to both services is anonymous by design.
| style="vertical-align:middle;text-align:left;" |No action required.
|-
| style="vertical-align:middle;text-align:left;" |CVE-2026-7261
| style="vertical-align:middle;text-align:left;" class="col-green-bg" |Not affected. BlueSpice does not use a PHP SOAP server, and the affected <code>SOAP_PERSISTENCE_SESSION</code> setting is not in use.
| style="vertical-align:middle;text-align:left;" |No action required.
|}

== Solution ==
No immediate action required. The affected libraries will be updated in the next regular release.

Manual:Extension/Forms/5.1.8

Bhuber — Wed, 03 Jun 2026 13:07:24 GMT

← Older revision		Revision as of 13:07, 3 June 2026
Line 43:		Line 43:
	*'''Target type:''' Email		*'''Target type:''' Email
	*'''Recipient:''' Possible recipients must have been configured on the server for security reasons. Example:		*'''Recipient:''' Possible recipients must have been configured on the server for security reasons. Example:
	<syntaxhighlight lang="~~text~~">		<syntaxhighlight lang="php" line="1">
	$wgFormsTargetEMailRecipients = [		$wgFormsTargetEMailRecipients = [
			'Marketing' => "marketing@example.com",
	'Marketing' => "marketing@example.com",		'Administration' => 'WikiSysop'

	'Administration' => 'WikiSysop'

	];		];
	</syntaxhighlight>		</syntaxhighlight>
Line 58:		Line 55:


	[[mediawikiwiki:Help:Magic_words#Localisation\|Localization messages]] in combination with form fields can also be used as subject or email body:<syntaxhighlight lang="~~text~~">		[[mediawikiwiki:Help:Magic_words#Localisation\|Localization messages]] in combination with form fields can also be used as subject or email body:<syntaxhighlight lang="wikitext" line="1">
	{{int:Mailsubject\| {{{name}}}\|{{{surname}}} }}		{{int:Mailsubject\| {{{name}}}\|{{{surname}}} }}
	</syntaxhighlight>		</syntaxhighlight>

Manual:Extension/Forms

Bhuber — Wed, 03 Jun 2026 12:21:21 GMT

← Older revision		Revision as of 12:21, 3 June 2026
Line 46:		Line 46:
	*'''Target type:''' Email		*'''Target type:''' Email
	*'''Recipient:''' Possible recipients must have been configured on the server for security reasons. Example:		*'''Recipient:''' Possible recipients must have been configured on the server for security reasons. Example:
	<syntaxhighlight lang="~~text~~">		<syntaxhighlight lang="php">
	$wgFormsTargetEMailRecipients = [		$wgFormsTargetEMailRecipients = [
			'Marketing' => "marketing@example.com",
	'Marketing' => "marketing@example.com",		'Administration' => 'WikiSysop'

	'Administration' => 'WikiSysop'

	];		];
	</syntaxhighlight>		</syntaxhighlight>

Manual:Extension/Forms/Form elements and settings

Bhuber — Tue, 02 Jun 2026 07:42:47 GMT

Show changes