Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature. This occurs because there is an incomplete blacklist in the SVG inspection, allowing JavaScript in the SRC attribute of an IFRAME element. An authenticated attack with assets.create permission is required for exploitation.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2023/11/08/4 | Mailing List |
| https://census-labs.com/news/2023/11/08/weak-svg-asset-filtering-mechanism-in-squidex-cms/ | Exploit |
| https://support.squidex.io/c/news/9 | Vendor Advisory |
Configurations
History
12 Dec 2023, 17:05
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:squidex.io:squidex:*:*:*:*:*:*:*:* | |
| CWE | CWE-79 | |
| References | () http://www.openwall.com/lists/oss-security/2023/11/08/4 - Mailing List | |
| References | () https://census-labs.com/news/2023/11/08/weak-svg-asset-filtering-mechanism-in-squidex-cms/ - Exploit | |
| References | () https://support.squidex.io/c/news/9 - Vendor Advisory | |
| First Time |
Squidex.io squidex
Squidex.io |
07 Dec 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-07 06:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-46857
Mitre link : CVE-2023-46857
CVE.ORG link : CVE-2023-46857
JSON object : View
Products Affected
squidex.io
- squidex
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')