요약
- CVE-2024-45592은(는) damienharper/auditor-bundle, auditor-bundle (damienharper)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.45%, 전체 취약점의 39.0%보다 높음.
- 조치: 5.2.6 이상으로 업데이트하세요.
Description
Summary
Unescaped entity property enables Javascript injection.
Details
I think this is possible because %source_label% in twig macro is not escaped. Therefore script tags can be inserted and are executed.
PoC
Impact
persistent XSS. JS can be injected and executed.
NVD description
auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Prior to version 5.2.6, there is an unescaped entity property enabling Javascript injection. This is possible because `%source_label%` in twig macro is not escaped. Therefore script tags can be inserted and are executed. The vulnerability is fixed in versions 6.0.0 and 5.2.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free