logo

Database

Server side cross-site scripting In silverstripe/framework

Description

Silverstripe Framework has a XSS via insert media remote file oembed

Impact

When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on both the CMS and the front-end of the website.

References

Reported by

James Nicoll from Fujitsu Cyber Security Services

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2024-476052. NVD-2024-476053. OSV-2024-476054. GHSA-7cmp-cgg8-4c825. GCVE-2024-47605

References

1. https://github.com/silverstripe/silverstripe-asset-admin/security/advisories/GHSA-7cmp-cgg8-4c822. https://github.com/silverstripe/silverstripe-framework/commit/09b5052c86932f273e0d733428c9aade70ff2a4a3. https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2024-47605.yaml4. https://www.silverstripe.org/download/security-releases/cve-2024-47605

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.