요약
- CVE-2020-5298은(는) october/backend, october (octobercms)에 영향을 주는 보통 (CVSS 4.8) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.91%, 전체 취약점의 60.0%보다 높음.
- 조치: 1.0.466 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| october/backend Packagist | ≥ 1.0.319, < 1.0.466
| 1.0.466
|
| october | ≥ 1.0.319, < 1.0.466
| 1.0.466
|
Description
Impact
A user with the ability to use the import functionality of the ImportExportController behavior could be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a reflected XSS attack on the user in question
Patches
Issue has been patched in Build 466 (v1.0.466).
Workarounds
Apply https://github.com/octobercms/october/commit/cd0b6a791f995d86071a024464c1702efc50f46c to your installation manually if unable to upgrade to Build 466.
References
Reported by Sivanesh Ashok
For more information
If you have any questions or comments about this advisory:
Threat assessment:
<img width="1100" alt="Screen Shot 2020-03-31 at 2 01 52 PM" src="https://user-images.githubusercontent.com/7253840/78070158-8f7ef580-7358-11ea-950c-226533f6a0a3.png">
NVD description
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the `ImportExportController` behavior can be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a reflected XSS attack on the user in question Issue has been patched in Build 466 (v1.0.466).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free