[XWIKI-19294] XSS in the Flamingo theme manager - XWiki.org JIRA

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 6.3-rc-1, 6.2.4
Fix Version/s: 12.10.11, 13.4.7, 14.0-rc-1, 13.10.3
Component/s: Flamingo Theme
Labels:

Difficulty:
Unknown
Documentation:
N/A
Documentation in Release Notes:
N/A
Similar issues:

Description

To reproduce:

http://127.0.0.1:8080/xwiki/bin/view/FlamingoThemesCode/WebHomeSheet?newThemeName=%22%3E%3Cimg%20src=1%20onerror=alert(1)%3E%22&form_token=1&action=create

The URL parameter "newThemeName" is inserted in the form without any XML escaping.

Attachments

Issue Links

is caused by

XWIKI-10845 Provide an UI for managing Flamingo Themes

Closed

links to

GitHub Security advisory

Activity

People

Assignee:: Thomas Mortagne

Reporter:: Thomas Mortagne

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 04/Jan/22 11:26

Updated:: 07/Jul/22 11:28

Resolved:: 04/Jan/22 11:48