Movable Type Cross Site Scripting and Security Bypass Vulnerabilities

Bugtraq ID:	35471
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 10 2009 12:00AM
Updated:	Jun 26 2009 05:49PM
Credit:	Unknown
Vulnerable:	Movable Type Movable Type Pro 4.25 Movable Type Movable Type Pro 4.24 Movable Type Movable Type Open Source 4.25 Movable Type Movable Type Open Source 4.24 Movable Type Movable Type Enterprise 4.25 Movable Type Movable Type Enterprise 4.24 Movable Type Movable Type Community Solution 4.25 Movable Type Movable Type Community Solution 4.24 Movable Type Movable Type 4.25 Movable Type Movable Type 4.24
Not Vulnerable:	Movable Type Movable Type Pro 4.26 Movable Type Movable Type Open Source 4.26 Movable Type Movable Type Enterprise 4.26 Movable Type Movable Type Community Solution 4.26 Movable Type Movable Type 4.26

Movable Type Cross Site Scripting and Security Bypass Vulnerabilities

Movable Type is prone to a cross-site scripting issue and a security-bypass issue.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site or to obtain or modify potentially sensitive information. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions prior to Movable Type 4.26 are affected.

Movable Type Cross Site Scripting and Security Bypass Vulnerabilities

Attackers may exploit these issues through a browser.

To exploit a cross-site scripting issue, an attacker must entice an unsuspecting victim into following a malicious URI.

Movable Type Cross Site Scripting and Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Movable Type Cross Site Scripting and Security Bypass Vulnerabilities

References:

• JVN#08369659 (JPCERT/CC)
  
• JVN#86472161 (JPCERT/CC)
  
• Movable Type 4.26 Release Notes (Movable Type)
  
• Movable Type Homepage (Movable Type)