Drupal Chat Room Module Cross Site Scripting and Cross Request Forgery Vulnerabilities
BID:46118
Info
Drupal Chat Room Module Cross Site Scripting and Cross Request Forgery Vulnerabilities
| Bugtraq ID: | 46118 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 02 2011 12:00AM |
| Updated: | Feb 02 2011 12:00AM |
| Credit: | Steffen Schüssler and Greg Knaddison |
| Vulnerable: |
Drupal Chat Room 6.x-2.12 |
| Not Vulnerable: |
Drupal Chat Room 6.x-2.13 |
Discussion
Drupal Chat Room Module Cross Site Scripting and Cross Request Forgery Vulnerabilities
The Chat Room module for Drupal is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can exploit the cross-site request-forgery issue by tricking a victim into following a specially crafted HTTP request designed to perform some action on the attacker's behalf using the victim's currently active session.
Versions prior to Chat Room 6.x-2.13 are vulnerable.
The Chat Room module for Drupal is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. The attacker can exploit the cross-site request-forgery issue by tricking a victim into following a specially crafted HTTP request designed to perform some action on the attacker's behalf using the victim's currently active session.
Versions prior to Chat Room 6.x-2.13 are vulnerable.
Exploit / POC
Drupal Chat Room Module Cross Site Scripting and Cross Request Forgery Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit these issues, an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
Drupal Chat Room Module Cross Site Scripting and Cross Request Forgery Vulnerabilities
Solution:
The vendor has released updates. Please see the references for details.
Drupal Chat Room 6.x-2.12
Solution:
The vendor has released updates. Please see the references for details.
Drupal Chat Room 6.x-2.12
-
Drupal chatroom-6.x-2.13.tar.gz
http://drupal.org/node/1045716
References
Drupal Chat Room Module Cross Site Scripting and Cross Request Forgery Vulnerabilities
References:
References: