GitHub Advisoryadvisory · NuGet

GHSA-6xmx-85x3-4cv2 Stored XSS via SVG File Upload

LOW Published 2023-12-13 Modified 2023-12-13 Official page ↗
Aliases
CVE-2023-49279
Ecosystem
NuGet
Packages
Umbraco.CMS
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:N
Weaknesses
CWE-79
Reviewed
2023-12-13

Affected packages

• NuGet Umbraco.CMS: >= 7.0.0, < 7.15.11 → fixed in 7.15.11 • NuGet Umbraco.CMS: >= 8.0.0, < 8.18.9 → fixed in 8.18.9 • NuGet Umbraco.CMS: >= 9.0.0, < 10.7.0 → fixed in 10.7.0 • NuGet Umbraco.CMS: >= 11.0.0, < 11.5.0 → fixed in 11.5.0 • NuGet Umbraco.CMS: >= 12.0.0, < 12.2.0 → fixed in 12.2.0

Description

Impact A user with access to the backoffice can upload SVG files that include scripts. If the user can trick another user to load the media directly in a browser, the scripts can be executed. Workaround Implement the server side file validation https://docs.umbraco.com/umbraco-cms/reference/security/serverside-file-validation or Serve all media from an different host (e.g cdn) that where umbraco is hosted

Related

Alias · CVE (1)

  • CVE-2023-49279 Umbraco is an ASP.NET content management system (CMS). vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References