CVE-2024-7394 Stored XSS in getAttributeSetName()

2024-08-0816:31:48

CWE-20

ConcreteCMS

github.com

cve-2024-7394

stored xss

getattributesetname

concrete cms

version 9.3.2

vulnerability

administrator

malicious code

cvss v3.1

cvss v4.0

CVSS4

1.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

ACTIVE

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/SC:N/VI:N/SI:N/VA:N/SA:N

AI Score

Confidence

High

EPSS

0.001

Percentile

21.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v3.1 rank of 2 with vector AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator and a CVSS v4.0 rank of 1.8 with vector CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N . Thanks, m3dium for reporting.

CNA Affected

[
  {
    "repo": "https://github.com/concretecms/concretecms",
    "vendor": "Concrete CMS",
    "product": "Concrete CMS",
    "versions": [
      {
        "status": "affected",
        "version": "9",
        "lessThan": "9.3.3",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "5",
        "lessThan": "8.5.18",
        "versionType": "git"
      }
    ],
    "defaultStatus": "unaffected"
  }
]