GitHub Advisoryadvisory · Packagist

GHSA-gg6x-xx78-448c Reflected XSS when importing CSV in OctoberCMS

MEDIUM Published 2020-06-03 Modified 2021-03-04 Official page ↗
Aliases
CVE-2020-5298
Ecosystem
Packagist
Packages
october/backend
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79, CWE-87
Reviewed
2020-06-03

Affected packages

• Packagist october/backend: >= 1.0.319, < 1.0.466 → fixed in 1.0.466

Description

Impact A user with the ability to use the import functionality of the `ImportExportController` behavior could be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a reflected XSS attack on the user in question Patches Issue has been patched in Build 466 (v1.0.466). Workarounds Apply https://github.com/octobercms/october/commit/cd0b6a791f995d86071a024464c1702efc50f46c to your installation manually if unable to upgrade to Build 466. References Reported by Sivanesh Ashok For more information If you have any questions or comments about this advisory: • Email us at [email protected] Threat assessment:

Related

Alias · CVE (1)

  • CVE-2020-5298 In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to use the import… vulnerability

Weakness · CWE (2)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness
  • CWE-87 Improper Neutralization of Alternate XSS Syntax weakness

References