Apache Continuum and Archiva Cross Site Scripting Vulnerability

Bugtraq ID:	46311
Class:	Input Validation Error
CVE:	CVE-2011-0533
Remote:	Yes
Local:	No
Published:	Feb 10 2011 12:00AM
Updated:	Feb 16 2011 07:39PM
Credit:	Tal Be'ery of Imperva, Brett Porter
Vulnerable:	Apache Software Foundation Continuum 1.4 Apache Software Foundation Continuum 1.3.6 Apache Archiva 1.3.3 Apache Archiva 1.3.2 Apache Archiva 1.3.1 Apache Archiva 1.3
Not Vulnerable:	Apache Software Foundation Continuum 1.3.7 Apache Archiva 1.3.4

Apache Continuum and Archiva Cross Site Scripting Vulnerability

Apache Continuum and Archiva are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.

The following versions are affected:

Apache Continuum 1.3.6 and 1.4.0 (Beta)
Apache Archiva 1.3 through 1.3.3

Other versions may also be affected.

Apache Continuum and Archiva Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.

Apache Continuum and Archiva Cross Site Scripting Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

Apache Continuum and Archiva Cross Site Scripting Vulnerability

References:

• Apache Archiva Homepage (Apache Software Foundation)
  
• Apache Continuum Homepage (Apache Software Foundation)
  
• Security Vulnerabilities (Apache Software Foundation)
  
• [SECURITY] CVE-2011-0533: Apache Archiva cross-site scripting vulnerability (brett)
  
• Revision 1066056 (Apache Software Foundation)
  
• Security Vulnerabilities (Apache Software Foundation)