CodeIgniter 'xss_clean()' Filter Security Bypass Vulnerability

Bugtraq ID:	54620
Class:	Design Error
CVE:	CVE-2012-1915
Remote:	Yes
Local:	No
Published:	Jul 19 2012 12:00AM
Updated:	Jul 19 2012 12:00AM
Credit:	Krzysztof Kotowicz
Vulnerable:	EllisLab CodeIgniter 2.1.1 EllisLab CodeIgniter 2.1 EllisLab CodeIgniter 2.0.3 EllisLab CodeIgniter 1.7.2 EllisLab CodeIgniter 1.7.1 EllisLab CodeIgniter 1.5.2 EllisLab CodeIgniter 1.0
Not Vulnerable:	EllisLab CodeIgniter 2.1.2

CodeIgniter 'xss_clean()' Filter Security Bypass Vulnerability

CodeIgniter is prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass XSS filter protections and perform cross-site scripting attacks.

CodeIgniter versions prior to 2.1.2 are vulnerable.

CodeIgniter 'xss_clean()' Filter Security Bypass Vulnerability

Attackers can use a browser to exploit this issue.

Example inputs are available. Please see the references.

• /data/vulnerabilities/exploits/54620.txt

CodeIgniter 'xss_clean()' Filter Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

CodeIgniter 'xss_clean()' Filter Security Bypass Vulnerability

References:

• CodeIgniter <= 2.1.1 xss_clean() Cross Site Scripting filter bypass (Krzysztof Kotowicz)
  
• CodeIgniter Homepage (EllisLab)
  
• CodeIgniter Version 2.1.2 Changelog (EllisLab)