Lucene search

GitHub Advisory DatabaseGHSA-JFXW-6C5V-C42F

HistoryNov 01, 2023 - 2:35 p.m.

Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews

2023-11-0114:35:42

CWE-79

GitHub Advisory Database

github.com

pimcore

xss

pdf previews

cookie theft

unauthorized access

malicious sites

patches

update

software

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

23.1%

JSON

Impact

This vulnerability has the potential to steal a user’s cookie and gain unauthorized access to that user’s account through the stolen cookie or redirect users to other malicious sites.

Proof of Concept
Step 1. Go to /admin and login.
Step 2. In Documents, go to home -> click on Sample Content -> click Document folder
Step 3. Upload file PDF content XSS payload

Patches

Apply patches
https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c.patch
https://github.com/pimcore/admin-ui-classic-bundle/commit/19fda2e86557c2ed4978316104de5ccdaa66d8b9.patch

Workarounds

Update to version 1.2.0 or apply patches manually
https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c.patch
https://github.com/pimcore/admin-ui-classic-bundle/commit/19fda2e86557c2ed4978316104de5ccdaa66d8b9.patch

Affected configurations

Vulners

Node

pimcoreadmin_classic_bundleRange<1.2.0pimcore

VendorProductVersionCPE
pimcoreadmin_classic_bundle*cpe:2.3:a:pimcore:admin_classic_bundle:*:*:*:*:*:pimcore:*:*

Vendor	Product	Version	CPE
pimcore	admin_classic_bundle	*	cpe:2.3:a:pimcore:admin_classic_bundle::::::pimcore::*

References

github.com/advisories/GHSA-jfxw-6c5v-c42f

github.com/pimcore/admin-ui-classic-bundle/commit/19fda2e86557c2ed4978316104de5ccdaa66d8b9

github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-jfxw-6c5v-c42f

github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c

nvd.nist.gov/vuln/detail/CVE-2023-46722

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

23.1%

JSON

Related for GHSA-JFXW-6C5V-C42F