Zwiki Cross-Site Scripting Vulnerability

Bugtraq ID:	11745
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 24 2004 12:00AM
Updated:	Nov 24 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Jeremy Bae of STG Security.
Vulnerable:	Zwiki Zwiki 0.36.2 + Gentoo Linux Zwiki Zwiki 0.10 rc1
Not Vulnerable:

Zwiki Cross-Site Scripting Vulnerability

It is reported that Zwiki is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to including it in dynamic web page content.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user.

Zwiki Cross-Site Scripting Vulnerability

The following example is available:

http://www.example.com/<img src=javascript:alert('hi')>

Zwiki Cross-Site Scripting Vulnerability

Solution:
Gentoo Linux has released an advisory (GLSA 200412-23) dealing with this issue. All Zwiki users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-zope/zwiki-0.36.2-r1"

Please see the referenced Gentoo Linux advisory for more information.

Zwiki Cross-Site Scripting Vulnerability

References:

• #925 Zwiki XSS vulnerability (Zwiki)
  
• Zwiki Homepage (Zwiki)
  
• Re: STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability (Chris Withers )
  
• STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability ()