easyXDM 'name.html' Cross Site Scripting Vulnerability

Bugtraq ID:	65291
Class:	Input Validation Error
CVE:	CVE-2014-1403
Remote:	Yes
Local:	No
Published:	Jan 31 2014 12:00AM
Updated:	Jan 31 2014 12:00AM
Credit:	Krzysztof Kotowicz
Vulnerable:	easyXDM easyXDM 2.4.18 easyXDM easyXDM 2.4.16
Not Vulnerable:	easyXDM easyXDM 2.4.19

easyXDM 'name.html' Cross Site Scripting Vulnerability

easyXDM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Versions prior to easyXDM 2.4.19 are vulnerable.

easyXDM 'name.html' Cross Site Scripting Vulnerability

To exploit this issue an attacker must entice an unsuspecting victim to open a malicious URI.

The following example data is available:

<iframe id=f></iframe><iframe name="easyXDM_constructor_provider"src="http://www.example.com/example/bridge.html"; onload="document.getElementById('f').src='http://www.example.com//name.html#_3constructor,javascript:alert(document.domain)//';"> </iframe>location.hash value

easyXDM 'name.html' Cross Site Scripting Vulnerability

References:

• [CVE-2014-1403] DOM XSS in EasyXDM 2.4.18 (Krzysztof Kotowicz)
  
• easyXDm HomePage (easyXDM)