CVE-2017-1000431: eZ Publish Cross-site Scripting (XSS) vulnerability
Summary
CVE-2017-1000431: eZ Publish Cross-site Scripting (XSS) vulnerability. Affects ezsystems/ezpublish-legacy across 2 version ranges.
>= 5.3.0, < 5.3.12.1
>= 5.4.0, < 5.4.10
Fixed in 5.3.12.1 or 5.4.10, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
eZ Publish is an open-source content management system (CMS) developed by eZ Systems. It allows users to create, manage, and publish digital content on websites. The affected package, ezsystems/ezpublish-legacy, is a legacy version of eZ Publish. It is vulnerable to a cross-site scripting (XSS) issue in the search module. This vulnerability exists in eZ Publish versions 5.4.0 to 5.4.9, as well as 5.3.12.0 and older.
Vulnerability Detail
The XSS vulnerability in eZ Publish's search module allows attackers to inject malicious scripts into the application. This can lead to various security risks, including the theft of authentication credentials. An attacker could exploit this vulnerability by crafting a specially crafted search query that includes malicious script code. When a user performs a search using the affected module, the injected script code would execute in the user's browser, potentially compromising their session and allowing the attacker to perform unauthorized actions.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 5.3.0, < 5.3.12.15.3.12.1composer require ezsystems/ezpublish-legacy:5.3.12.1 -
>= 5.4.0, < 5.4.105.4.10composer require ezsystems/ezpublish-legacy:5.4.10
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can disable the search module in eZ Publish to mitigate the risk of exploitation. This can be done by modifying the application's configuration to exclude the search functionality. However, this workaround may impact the usability of the CMS, so it is recommended to apply the official fix as soon as possible.
Conclusion
The eZ Publish CMS is vulnerable to a cross-site scripting (XSS) issue in the search module. This vulnerability can be exploited by attackers to inject malicious scripts and potentially steal authentication credentials. It is crucial to upgrade to a secure version of eZ Publish to mitigate this risk. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ezsystems/ezpublish-legacy →
FAQ
eZ Publish is an open-source content management system (CMS) developed by eZ Systems. It allows users to create, manage, and publish digital content on websites.
Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. These scripts can be used to steal sensitive information, manipulate website content, or perform unauthorized actions on behalf of the user.
An attacker can exploit this vulnerability by crafting a specially crafted search query that includes malicious script code. When a user performs a search using the affected module, the injected script code would execute in the user's browser, potentially compromising their session and allowing the attacker to perform unauthorized actions.
Yes, a temporary workaround is to disable the search module in eZ Publish. However, this may impact the usability of the CMS. It is recommended to apply the official fix by upgrading to a secure version of eZ Publish.
To fix this vulnerability, it is recommended to upgrade to a fixed version of eZ Publish. For versions 5.4.0 to 5.4.9, upgrade to version 5.4.10. For versions 5.3.12.0 and older, upgrade to version 5.3.12.1.
References
Related vulnerabilities
Recent vulnerabilities recorded for ezsystems/ezpublish-legacy.
