My Calendar Plugin For Serendipity Cross-Site Request Forgery Vulnerability

Bugtraq ID:	26955
Class:	Design Error
CVE:	CVE-2007-6390
Remote:	Yes
Local:	No
Published:	Dec 10 2007 12:00AM
Updated:	Dec 21 2007 03:41PM
Credit:	Johannes (Hanno) Böck is credited with the discovery of this vulnerability.
Vulnerable:	S9Y Serendipity My Calendar Plugin 0.12
Not Vulnerable:	S9Y Serendipity My Calendar Plugin 0.13

My Calendar Plugin For Serendipity Cross-Site Request Forgery Vulnerability

My Calendar plugin for Serendipity is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to use a victim's currently active session to perform actions with the application and to carry out cross-site scripting attacks on the blog page.

This issue affects My Calendar 0.12; other versions of the plugin may also be vulnerable.

My Calendar Plugin For Serendipity Cross-Site Request Forgery Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

My Calendar Plugin For Serendipity Cross-Site Request Forgery Vulnerability

Solution:
The vendor has released My Calendar 0.13 to address this issue; please see the references for details.


S9Y Serendipity My Calendar Plugin 0.12

• S9Y serendipity_event_mycalendar.zip
  http://spartacus.s9y.org/cvs/additional_plugins/serendipity_event_myca lendar.zip

My Calendar Plugin For Serendipity Cross-Site Request Forgery Vulnerability

References:

• Serendipity Homepage (S9Y)
  
• Some XSS issues in Serendipity found (Johannes (Hanno) Böck)