ConcourseConnect HTML Injection and Cross Site Request Forgery Vulnerabilities
BID:56811
Info
ConcourseConnect HTML Injection and Cross Site Request Forgery Vulnerabilities
| Bugtraq ID: | 56811 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 04 2012 12:00AM |
| Updated: | Dec 04 2012 12:00AM |
| Credit: | Matthew Joyce via Secunia |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
ConcourseConnect HTML Injection and Cross Site Request Forgery Vulnerabilities
ConcourseConnect is prone to multiple HTML-injection vulnerabilities and a cross-site request forgery vulnerability.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions, execute arbitrary script or HTML code within the context of the browser, and steal cookie-based authentication credentials. Other attacks are also possible.
Versions prior to ConcourseConnect 2.0.3, 3.0 and 4.0 are vulnerable.
ConcourseConnect is prone to multiple HTML-injection vulnerabilities and a cross-site request forgery vulnerability.
Exploiting these issues may allow a remote attacker to perform certain unauthorized actions, execute arbitrary script or HTML code within the context of the browser, and steal cookie-based authentication credentials. Other attacks are also possible.
Versions prior to ConcourseConnect 2.0.3, 3.0 and 4.0 are vulnerable.
Exploit / POC
ConcourseConnect HTML Injection and Cross Site Request Forgery Vulnerabilities
An attacker can exploit HTML-injection issues through a browser.
To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into visiting a malicious site.
An attacker can exploit HTML-injection issues through a browser.
To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into visiting a malicious site.
Solution / Fix
ConcourseConnect HTML Injection and Cross Site Request Forgery Vulnerabilities
Solution:
The vendor has released an advisory detailing this issue and recommends that users upgrade to version 4.0 (2012-11-21). Please see the references for details.
Solution:
The vendor has released an advisory detailing this issue and recommends that users upgrade to version 4.0 (2012-11-21). Please see the references for details.
References
ConcourseConnect HTML Injection and Cross Site Request Forgery Vulnerabilities
References:
References: