CVE-2024-1247 Concrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name field

2024-02-0918:58:24

CWE-20

ConcreteCMS

github.com

concrete cms

stored xss

role name

validation

administrator

security team

cvss v3

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Concrete CMS version 9 before 9.2.5 is vulnerable to stored XSS via the Role Name field since there is insufficient validation of administrator provided data for that field. A rogue administrator could inject malicious code into the Role Name field which might be executed when users visit the affected page. The Concrete CMS Security team scored this 2 with CVSS v3 vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator . Concrete versions below 9 do not include group types so they are not affected by this vulnerability.

CNA Affected

[
  {
    "repo": "https://github.com/concretecms/concretecms",
    "vendor": "Concrete CMS",
    "product": "Concrete CMS",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0",
        "lessThan": "9.2.5",
        "versionType": "patch"
      }
    ],
    "defaultStatus": "unaffected"
  }
]