Openfire 'user-properties.jsp' Cross-Site Scripting Vulnerability
BID:32938
Info
Openfire 'user-properties.jsp' Cross-Site Scripting Vulnerability
| Bugtraq ID: | 32938 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-0496 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2009 12:00AM |
| Updated: | Apr 03 2009 09:46PM |
| Credit: | Federico Muttis of Core Security Technologies |
| Vulnerable: |
Igniterealtime Openfire 3.6.2 Igniterealtime Openfire 3.5.2 Igniterealtime Openfire 3.5.1 Igniterealtime Openfire 3.5 Igniterealtime Openfire 3.4.5 Igniterealtime Openfire 3.4.4 Igniterealtime Openfire 3.4.3 Igniterealtime Openfire 3.4.2 Igniterealtime Openfire 3.4.1 Igniterealtime Openfire 3.4 Igniterealtime Openfire 3.3.1 Igniterealtime Openfire 3.3 Igniterealtime Openfire 3.6.0a Gentoo Linux |
| Not Vulnerable: |
Igniterealtime Openfire 3.6.3 |
Discussion
Openfire 'user-properties.jsp' Cross-Site Scripting Vulnerability
Openfire is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Openfire 3.6.2 is vulnerable; prior versions may also be affected.
Openfire is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Openfire 3.6.2 is vulnerable; prior versions may also be affected.
Exploit / POC
Openfire 'user-properties.jsp' Cross-Site Scripting Vulnerability
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following proof-of-concept URI is available:
http://www.example.com/user-properties.jsp?username=%3C[xss]
To exploit this issue, an attacker must entice an unsuspecting user to follow a malicious URI.
The following proof-of-concept URI is available:
http://www.example.com/user-properties.jsp?username=%3C[xss]
Solution / Fix
Openfire 'user-properties.jsp' Cross-Site Scripting Vulnerability
Solution:
Vendor updates are available. Contact the vendor for details.
Solution:
Vendor updates are available. Contact the vendor for details.
References
Openfire 'user-properties.jsp' Cross-Site Scripting Vulnerability
References:
References:
- Openfire Homepage (Ignite Realtime)
- CORE-2008-1128: Openfire multiple vulnerabilities (CORE Security Technologies Advisories
- Openfire multiple vulnerabilities (Core Security Technologies)