Contao 'X_FORWARDED_FOR' HTTP Header Arbitrary Script Injection Vulnerability

Bugtraq ID:	45794
Class:	Input Validation Error
CVE:	CVE-2011-0508
Remote:	Yes
Local:	No
Published:	Jan 13 2011 12:00AM
Updated:	Dec 01 2011 05:56PM
Credit:	David Vieira-Kurz
Vulnerable:	Leo Feyer Contao 2.9.2
Not Vulnerable:	Leo Feyer Contao 2.9.3

Contao 'X_FORWARDED_FOR' HTTP Header Arbitrary Script Injection Vulnerability

Contao is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code within the context of the application.

Contao 2.9.2 is vulnerable; other versions may also be affected.

Contao 'X_FORWARDED_FOR' HTTP Header Arbitrary Script Injection Vulnerability

To launch an attack, an attacker must trick a victim into viewing a malicious website.

Contao 'X_FORWARDED_FOR' HTTP Header Arbitrary Script Injection Vulnerability

Solution:
Updates are available. Please see the reference for more details.

Contao 'X_FORWARDED_FOR' HTTP Header Arbitrary Script Injection Vulnerability

References:

• Contao 2.9.3 Release Notes (Contao)
  
• Contao Homepage (Leo Feyer)
  
• Sicherheitsluecke: Header-Injection und Cross-Site-Scripting (Contao)