GitHub Advisoryadvisory · Packagist

GHSA-rjw8-v7rr-r563 October System module has a Reflected XSS via X-October-Request-Handler Header

LOW Published 2024-06-26 Modified 2024-06-26 Official page ↗
Aliases
CVE-2024-25637
Ecosystem
Packagist
Packages
october/system
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-79
Reviewed
2024-06-26

Affected packages

• Packagist october/system: >= 3.2, < 3.5.15 → fixed in 3.5.15

Description

Impact The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interactions. This unescaped value is only detectable when using a proxy interception tool. Patches This issue has been patched in v3.5.15. References Credits to: • Mayank Mehra For more information If you have any questions or comments about this advisory: • Email us at [email protected]

Related

Alias · CVE (1)

  • CVE-2024-25637 October is a self-hosted CMS platform based on the Laravel PHP Framework. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References