要点
- CVE-2020-5298 是影响 october/backend, october (octobercms) 的中危 (CVSS 4.8)漏洞。
- 未来 30 天内被利用的概率（EPSS）：0.91%，高于 60.0% 的漏洞。
- 修复：升级到 1.0.466 或更高版本。
| Package | Affected versions | Patched versions |
|---|
| october/backend Packagist | ≥ 1.0.319, < 1.0.466
| 1.0.466
|
| october | ≥ 1.0.319, < 1.0.466
| 1.0.466
|
Description
Impact
A user with the ability to use the import functionality of the ImportExportController behavior could be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a reflected XSS attack on the user in question
Patches
Issue has been patched in Build 466 (v1.0.466).
Workarounds
Apply https://github.com/octobercms/october/commit/cd0b6a791f995d86071a024464c1702efc50f46c to your installation manually if unable to upgrade to Build 466.
References
Reported by Sivanesh Ashok
For more information
If you have any questions or comments about this advisory:
Threat assessment:
<img width="1100" alt="Screen Shot 2020-03-31 at 2 01 52 PM" src="https://user-images.githubusercontent.com/7253840/78070158-8f7ef580-7358-11ea-950c-226533f6a0a3.png">
NVD description
In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, a user with the ability to use the import functionality of the `ImportExportController` behavior can be socially engineered by an attacker to upload a maliciously crafted CSV file which could result in a reflected XSS attack on the user in question Issue has been patched in Build 466 (v1.0.466).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free