Adobe Connect 9.3 Cross Site Scripting

33   2019-08-05 08:08   nipc
漏洞信息
漏洞编号: 1315
CVE编号: CVE-2015-0343
漏洞类型: -
漏洞来源: cxs
发布日期: 2015-06-12
CVSS
CVSS值: 4.3/10
严重级别: 低危
利用范围: Remote
攻击复杂度: Medium
认证级别: No required
漏洞描述

WLB-2015060065[***]http://cxsecurity.com/issue/WLB-2015060065[***]Adobe Connect 9.3 Cross Site Scripting[***]2015.06.12[***] Stas Volfus[***] Low[***]CWE-79 [***]CVE-2015-0343[***]No[***]Yes[***]4.3/10[***]2.9/10[***]8.6/10[***]Remote[***]No required[***]None[***]Partial[***]None[***]Advisory: Adobe Connect Reflected XSS@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** Author: Stas Volfus (Bugsec Information Security LTD)@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** Vendor URL: http://www.adobe.com/ @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** Status: Vendor Notified@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** Vulnerability Description@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** Adobe Connect (Central) version: 9.3 is vulnerable to Reflected XSS (Cross Site Scripting).@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** The attack allows execution of arbitrary JavaScript in the context of the user’s browser.@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** CVE id: CVE-2015-0343 assigned for this issue.@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** PoC@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** The following URL demonstrates the vulnerability:@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** https://vulnerablewebsite.com/admin/home/homepage/search?account-id=1&filter-rows=1&filter-start=0&now=yes&query=<a href="javascript:alert('XSS')">XSS Link</a>@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** Disclosure Timeline@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** 04-NOV-2014 - Vendor notified@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** 01-DEC-2014 - CVE assigned@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** 27-MAR-2015 - Resolved by vendor, fix deployed on Adobe Connect 9.4.@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** @@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** References@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** ==========================@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** http://www.adobe.com/il_en/products/adobeconnect.html@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** https://helpx.adobe.com/adobe-connect/release-note/connect-94-release-notes.html@@@@@@@@@@$$$$$$$$$$&&&&&&&&&&##########suijishu0518893******** [***]http://www.adobe.com/il_en/products/adobeconnect.html[*]https://helpx.adobe.com/adobe-connect/release-note/connect-94-release-notes.html

POC

Advisory: Adobe Connect Reflected XSS Author: Stas Volfus (Bugsec Information Security LTD) Vendor URL: http://www.adobe.com/ Status: Vendor Notified ========================== Vulnerability Description ========================== Adobe Connect (Central) version: 9.3 is vulnerable to Reflected XSS (Cross Site Scripting). The attack allows execution of arbitrary JavaScript in the context of the user’s browser. CVE id: CVE-2015-0343 assigned for this issue. ========================== PoC ========================== The following URL demonstrates the vulnerability: https://vulnerablewebsite.com/admin/home/homepage/search?account-id=1&filter-rows=1&filter-start=0&now=yes&query=<a href="javascript:alert('XSS')">XSS Link</a> ========================== Disclosure Timeline ========================== 04-NOV-2014 - Vendor notified 01-DEC-2014 - CVE assigned 27-MAR-2015 - Resolved by vendor, fix deployed on Adobe Connect 9.4. ========================== References ========================== http://www.adobe.com/il_en/products/adobeconnect.html https://helpx.adobe.com/adobe-connect/release-note/connect-94-release-notes.html