CodeIgniter 'CI_Security' Class 'xss_clean()' Filter Security Bypass Weakness

Bugtraq ID:	50847
Class:	Design Error
CVE:	CVE-2011-4025
Remote:	Yes
Local:	No
Published:	Nov 29 2011 12:00AM
Updated:	Nov 29 2011 12:00AM
Credit:	Marian Ventuneac
Vulnerable:	EllisLab ExpressionEngine 2.2.2 EllisLab CodeIgniter 2.0.3
Not Vulnerable:	EllisLab ExpressionEngine 2.3 EllisLab CodeIgniter 2.1

CodeIgniter 'CI_Security' Class 'xss_clean()' Filter Security Bypass Weakness

CodeIgniter is prone to a security-bypass weakness.

An attacker can exploit this issue to bypass XSS filter protections and perform cross-site scripting attacks.

CodeIgniter 'CI_Security' Class 'xss_clean()' Filter Security Bypass Weakness

Attackers can use a browser to exploit this issue.

Example inputs are available. Please see the references.

CodeIgniter 'CI_Security' Class 'xss_clean()' Filter Security Bypass Weakness

Solution:
Vendor updates are available. Please contact the vendor for more information.

CodeIgniter 'CI_Security' Class 'xss_clean()' Filter Security Bypass Weakness

References:

• CodeIgniter Homepage (EllisLab)
  
• EllisLab xss_clean Filter Bypass - ExpressionEngine and CodeIgniter (Marian Ventuneac )
  
• ExpressionEngine Homepage (EllisLab)
  
• MVSA-11-013 - EllisLab xss_clean Filter Bypass - ExpressionEngine ([email protected])