Drupal CVS Management/Tracker Motivation Field Cross-Site Scripting Vulnerability

Bugtraq ID:	21455
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 06 2006 12:00AM
Updated:	Dec 06 2006 10:49PM
Credit:	The vendor reported this issue.
Vulnerable:	Drupal CVS management/tracker 4.7 2.0 Drupal CVS management/tracker 4.7 1.0
Not Vulnerable:	Drupal CVS management/tracker 4.7 2.2 Drupal CVS management/tracker 4.7 1.1

Drupal CVS Management/Tracker Motivation Field Cross-Site Scripting Vulnerability

Drupal CVS management/tracker is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Drupal CVS Management/Tracker versions prior to 4.7.0-1.1 are affected by this issue.

Drupal CVS Management/Tracker Motivation Field Cross-Site Scripting Vulnerability

An attacker can exploit this issue by tricking a victim user into following a malicious URI.

Drupal CVS Management/Tracker Motivation Field Cross-Site Scripting Vulnerability

Solution:
The vendor has released upgrades to address these issues. The latest versions available from the vendor's site are not affected.

Please see the referenced advisories for more information.

Drupal CVS Management/Tracker Motivation Field Cross-Site Scripting Vulnerability

References:

• DRUPAL-SA-2006-028 - CVS management/tracker XSS Vulnerability (Drupal)
  
• Vendor Homepage (Drupal)