You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
server {
listen 443 ssl;
# Enable TLS and forward secrecy
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers "ECDHE EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
# Generated certificates using certbot, we will mount these in docker-compose.yml
ssl_certificate /etc/ssl/certs/intranetwiki-bundle_13032023.crt;
ssl_certificate_key /etc/ssl/private/intranetwiki.cmbi.umcn.nl_13032023.key;
ssl_dhparam /etc/ssl/certsdhparam.pem;
ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
server_name fdp.cmbi.umcn.nl;
# We pass all the request to the fdp-client container, we can use HTTP in the internal network
# fdp-client_1 is the name of the client container in our configuration, we can use it as host
location / {
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass_request_headers on;
proxy_pass http://fdp-client;
#proxy_pass http://fairdatapoint-client;
}
location /blazegraph/ {
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass_request_headers on;
proxy_pass http://blazegraph:8080/blazegraph/;
}
}
# We redirect all request from HTTP to HTTPS
server {
listen 80;
server_name fdp.cmbi.umcn.nl;
return 301 https://$host$request_uri;
}
The radboudUMC security officer reports the following security vulnerabilities: (with solutions provided)
PivotX Multiple Cross-Site Scripting and Arbitrary File Upload Vulnerabilities
PivotX TimThumb Domain Name Security Bypass Vulnerability
(Customers are advised to upgrade to PivotX 2.3.9 and later to remediate these vulnerabilities.)
WordPress NextScripts: Social Networks Auto-Poster Plugin "wp-admin/admin.php" Cross-Site Scripting Vulnerability
(Customers are advised to install WP NextScripts 4.2.8or later versions to remediate this vulnerability.)
Since we're just using the fairdatapoint software, we don't know where these software packages are used in the fairdatapoint code. We're hereby asking the maintainers to solve these issues. Thank you!
The text was updated successfully, but these errors were encountered:
We had fairdatapoint running in the following setup:
docker-compose.yml
application.yml
nginx fdp conf
The radboudUMC security officer reports the following security vulnerabilities: (with solutions provided)
(Customers are advised to upgrade to PivotX 2.3.9 and later to remediate these vulnerabilities.)
(Customers are advised to install WP NextScripts 4.2.8or later versions to remediate this vulnerability.)
(The issue has been patched: https://helpx.adobe.com/security/products/magento/apsb22-38.html)
Since we're just using the fairdatapoint software, we don't know where these software packages are used in the fairdatapoint code. We're hereby asking the maintainers to solve these issues. Thank you!
The text was updated successfully, but these errors were encountered: