Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 18 Dec 2015 08:12:05 +0000
From: CSW Research Lab <disclose@...ersecurityworks.com>
To: "fulldisclosure-request@...lists.org" <fulldisclosure-request@...lists.org>, 
	"vuln@...unia.com" <vuln@...unia.com>, 
	"submissions@...ketstormsecurity.com" <submissions@...ketstormsecurity.com>, 
	"bugs@...uritytracker.com" <bugs@...uritytracker.com>, 
	"oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: [FD] [CVE-2015-8606] SilverStripe CMS & Framework v3.2.0 - Cross-Site
 Scripting Vulnerability

=======[SilverStripe CMS & Framework v3.2.0 – Cross-Site Scripting
Vulnerability
================================================================

Information
**********************

Vulnerability Type : Cross Site Scripting Vulnerability
Vulnerable Version : 3.2.0
Severity: Medium
Author – Arjun Basnet
CVE-ID: CVE-2015-8606
Homepage: https://www.silverstripe.org/download/

Description
***********************

SilverStripe CMS is prone to Cross-site scripting vulnerability because it
fails to sanitize user-supplied input. An attacker may leverage this issue
to execute arbitrary script code
in the browser of an unsuspecting user of the affected site.

Proof of Concept URL
***************************

[+]
http://192.168.56.101/SilverStripe/admin/security/EditForm/field/Members/item/new/ItemEditForm

Severity Level:
=========================================================
Medium

Description:
==========================================================

Vulnerable Product:

[+] SilverStripe CMS & Framework v3.2.0


Vulnerable Parameter(s):

[+]  Locale
[+]  FailedLoginCount

Report Timeline
************************

05-Nov-2015- Reported
11-Nov-2015- Vendor Response
16-Nov-2015- Vendor Fixed
13-Dec-2015- Public disclosed

Fixed Version:
*****************

[+] SilverStripe CMS & Framework v3.2.1


References
*****************

[+] http://www.silverstripe.org/download/security-releases/ss-2015-026
[+] https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)

Credits & Authors
--------------------
Arjun Basnet from Cyber Security Works Pvt. Ltd. (
http://cybersecurityworks.com)

About Cybersecurityworks
--------------------------------------------
Cybersecurity Works is basically an auditing company passionate working on
findings & reporting security flaws & vulnerabilities on web application
and network. As professionals, we handle each client differently based on
their unique requirements. Visit our website
http://www.cybersecurityworks.com/ for more information.

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.