GitHub Advisoryadvisory · npm
GHSA-7qcx-jmrc-h2rr Cross-Site Scripting in keystone
MEDIUM
Official page ↗
- Aliases
- CVE-2017-15878
- Ecosystem
- npm
- Packages
- keystone
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
- Reviewed
- 2020-06-16
Affected packages
• npm keystone: < 4.0.0 → fixed in 4.0.0
Description
Versions of `keystone` prior to 4.0.0 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize user input on the `Contact Us` page, allowing attackers to submit contact forms with malicious JavaScript in the message field. The output is not properly encoded leading an admin that opens new inquiry to execute the arbitrary JavaScript supplied in their browser.
Recommendation
Update to version 4.0.0 or later.
Related
Alias · CVE (1)
- CVE-2017-15878 A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the… vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-15878 advisory
- https://github.com/keystonejs/keystone/pull/4478 web
- https://github.com/advisories/GHSA-7qcx-jmrc-h2rr advisory
- https://github.com/keystonejs/keystone package
- https://packetstormsecurity.com/files/144756/KeystoneJS-4.0.0-beta.5-Unauthenticated-Stored-Cross-Site-Scripting.html web
- https://securelayer7.net/download/pdf/KeystoneJS-Pentest-Report-SecureLayer7.pdf web
- https://www.exploit-db.com/exploits/43054 web
- https://www.npmjs.com/advisories/980 web
- http://blog.securelayer7.net/keystonejs-open-source-penetration-testing-report web
- http://www.securityfocus.com/bid/101541 web