CVE-2020-11070: Cross-Site Scripting in SVG Sanitizer
Summary
CVE-2020-11070: Cross-Site Scripting in SVG Sanitizer. Affects t3g/svg-sanitizer versions < 1.0.3. Fixed in 1.0.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 't3g/svg-sanitizer' package is an open-source TYPO3 extension available on Packagist. It provides a sanitizer for SVG markup, aiming to prevent cross-site scripting (XSS) attacks by sanitizing SVG content. SVG (Scalable Vector Graphics) is an XML-based vector image format widely used on the web. This package is designed to ensure that SVG markup is properly processed and sanitized before being rendered in browsers.
Vulnerability Detail
This vulnerability (CVE-2020-11070) arises from a flaw in the SVG Sanitizer extension. When encountering slightly invalid or incomplete SVG markup, the sanitizer fails to correctly process and sanitize it. As a result, even though the markup is not valid, it is still evaluated by browsers, leading to a cross-site scripting vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into web pages, potentially compromising user data or performing unauthorized actions on behalf of the user.
How To Fix
Minimum fixed version
1.0.3
This is the first release that contains the fix.
composer require t3g/svg-sanitizer:1.0.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The 't3g/svg-sanitizer' TYPO3 extension versions prior to 1.0.3 are vulnerable to a cross-site scripting (XSS) attack due to improper sanitization of SVG markup. To mitigate this vulnerability, it is crucial to update the extension to version 1.0.3. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for t3g/svg-sanitizer →
FAQ
The vulnerability allows an attacker to inject malicious scripts into web pages, potentially leading to cross-site scripting attacks. This can result in unauthorized access to user data, session hijacking, defacement of websites, or other malicious activities.
Users of the 't3g/svg-sanitizer' TYPO3 extension versions prior to 1.0.3 are affected by this vulnerability. TYPO3 websites that utilize this extension and process user-generated SVG content are at risk.
At the time of this advisory, there are no known public exploits specifically targeting this vulnerability. However, given the nature of cross-site scripting vulnerabilities, it is important to address and fix this issue promptly to mitigate potential risks.
No specific workaround is available for this vulnerability. It is recommended to update the 't3g/svg-sanitizer' extension to the latest version (1.0.3) as soon as possible.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the composer.lock file, without requiring access to the code or installation.
