SilverStripe CVE-2011-4958 Cross-Site Scripting Vulnerability
BID:73496
Info
SilverStripe CVE-2011-4958 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73496 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-4958 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2014 12:00AM |
| Updated: | Apr 08 2014 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
SilverStripe SilverStripe 2.4.5 SilverStripe SilverStripe 2.4 SilverStripe SilverStripe 2.3.8 SilverStripe SilverStripe 2.3.6 SilverStripe SilverStripe 2.3.5 SilverStripe SilverStripe 2.3.4 SilverStripe SilverStripe 2.3.1 SilverStripe SilverStripe 2.3 SilverStripe SilverStripe 2.4.4 SilverStripe SilverStripe 2.4.3 SilverStripe SilverStripe 2.4.2 SilverStripe SilverStripe 2.4.1 SilverStripe SilverStripe 2.3.8 SilverStripe SilverStripe 2.3.7 SilverStripe SilverStripe 2.3.3 SilverStripe SilverStripe 2.3.2 SilverStripe SilverStripe 2.3.12 SilverStripe SilverStripe 2.3.11 SilverStripe SilverStripe 2.3.10 SilverStripe SilverStripe 2.3.1 Rc2 SilverStripe SilverStripe 2.3.1 Rc1 SilverStripe SilverStripe 2.3.0 Rc3 SilverStripe SilverStripe 2.3.0 Rc2 SilverStripe SilverStripe 2.3.0 Rc1 |
| Not Vulnerable: | |
Discussion
SilverStripe CVE-2011-4958 Cross-Site Scripting Vulnerability
SilverStripe is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a request to (1) admin/reports/, (2) admin/comments/, (3) admin/, (4) admin/show/, (5) admin/assets/, and (6) admin/security/.
SilverStripe is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the process function in SSViewer.php in SilverStripe before 2.3.13 and 2.4.x before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to template placeholders, as demonstrated by a request to (1) admin/reports/, (2) admin/comments/, (3) admin/, (4) admin/show/, (5) admin/assets/, and (6) admin/security/.
Exploit / POC
SilverStripe CVE-2011-4958 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
SilverStripe CVE-2011-4958 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
References
SilverStripe CVE-2011-4958 Cross-Site Scripting Vulnerability
References:
References:
- http://doc.silverstripe.org/sapphire/en/trunk/changelogs/2.3.12 (MISC)
- http://doc.silverstripe.org/sapphire/en/trunk/changelogs/2.4.6 (MISC)
- http://www.securityfocus.com/archive/1/archive/1/520050/100/0/threaded (MISC)
- https://github.com/silverstripe/sapphire/commit/16c3235 (MISC)
- https://github.com/silverstripe/sapphire/commit/52a895f (MISC)
- https://github.com/silverstripe/sapphire/commit/bdd6391 (MISC)
- SilverStripe 2.4.5 Multiple backend Cross-site scripting vulnerabilities (Stefan Schurtz)