SilverStripe HTML Injection and Cross Site Request Forgery Vulnerabilities

Bugtraq ID:	56747
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 30 2012 12:00AM
Updated:	Nov 30 2012 12:00AM
Credit:	Nathaniel Carew from Sense of Security Labs.
Vulnerable:
Not Vulnerable:

SilverStripe HTML Injection and Cross Site Request Forgery Vulnerabilities

SilverStripe is prone to an HTML-injection vulnerability and a cross-site request forgery vulnerability.

Exploiting these issues may allow a remote attacker to perform certain unauthorized actions, execute arbitrary script or HTML code within the context of the browser, and steal cookie-based authentication credentials. Other attacks are also possible.

SilverStripe 3.0.2 is vulnerable; other versions may also be affected.

SilverStripe HTML Injection and Cross Site Request Forgery Vulnerabilities

An attacker can exploit HTML-injection issues through a browser.

To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into visiting a malicious site.

The following example data is available:

• /data/vulnerabilities/exploits/56747.txt

SilverStripe HTML Injection and Cross Site Request Forgery Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

SilverStripe HTML Injection and Cross Site Request Forgery Vulnerabilities

References:

• 3.0.3 (2012-11-26) (SilverStripe)
  
• SilverStripe Homepage (SilverStripe )
  
• Sense of Security �?? Security Advisory �?? SOS-12-011. (Sense of Security)