Apache Roller 'q' Parameter Cross Site Scripting Vulnerability

Bugtraq ID:	33110
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 17 2008 12:00AM
Updated:	Jan 05 2009 09:22PM
Credit:	Hector Manuel Escalona Mendoza
Vulnerable:	Apache Software Foundation Apache Roller 4.0 Apache Software Foundation Apache Roller 3.1 Apache Software Foundation Apache Roller 3.0 Apache Software Foundation Apache Roller 2.3
Not Vulnerable:

Apache Roller 'q' Parameter Cross Site Scripting Vulnerability

Apache Roller is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Apache Roller 2.3, 3.0, 3.1, and 4.0 are vulnerable.

Apache Roller 'q' Parameter Cross Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

Apache Roller 'q' Parameter Cross Site Scripting Vulnerability

Solution:
The vendor has released a fix through the SVN repository. Please see the references for more information.

Apache Roller 'q' Parameter Cross Site Scripting Vulnerability

References:

• Apache Roller (Apache Software Foundation)
  
• Cross-site scripting vulnerability in Roller search term treatment (Anil Gangolli)
  
• Revision 668737 (Apache Software Foundation)