CVE-2020-11083: Stored XSS in October
Summary
CVE-2020-11083: Stored XSS in October. Affects october/backend versions >= 1.0.319, < 1.0.466. Fixed in 1.0.466. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
October is an open-source content management system (CMS) built on the Laravel framework. It provides a flexible and extensible platform for creating and managing websites. The October backend package is a core component of October CMS that handles the administration interface and user management. It allows users to create and edit content using markdown, which is then rendered as HTML.
The vulnerability identified as CVE-2020-11083 is a stored cross-site scripting (XSS) vulnerability in the October backend package. This vulnerability allows a user with access to a markdown FormWidget to inject malicious JavaScript code that will be executed when other users view the generated HTML from the field.
Vulnerability Detail
The stored XSS vulnerability in October CMS allows an attacker to inject arbitrary JavaScript code into the generated HTML from a markdown FormWidget. This can lead to various malicious activities, such as stealing user credentials, session hijacking, or defacement of the website. The vulnerability arises from the lack of proper input sanitization and validation in the markdown rendering process.
The impact of this vulnerability is dependent on the privileges of the user who injects the malicious code. If an attacker with administrative privileges exploits the vulnerability, they can compromise the entire system and potentially gain control over all user accounts.
The vulnerability has a CVSS score of 3.5, indicating a low severity level.
How To Fix
Minimum fixed version
1.0.466
This is the first release that contains the fix.
composer require october/backend:1.0.466Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If you are unable to upgrade to the recommended versions, you can manually apply the patch by following the instructions provided in the GitHub commits mentioned in the 'how_to_fix' section.
Conclusion
The stored XSS vulnerability in October CMS poses a risk to the security and integrity of websites built on the platform. It is crucial to apply the recommended patches or upgrade to the fixed versions to mitigate this vulnerability. Regularly updating the CMS and its plugins is essential to ensure the security of your website. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for october/backend →
FAQ
The impact of this vulnerability can vary depending on the privileges of the user who exploits it. An attacker with administrative privileges can potentially compromise the entire system and gain control over all user accounts.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities using just the composer.lock file.
There are no known instances of this vulnerability being exploited in the wild. However, it is always recommended to apply security patches and updates to mitigate any potential risks.
Yes, this vulnerability can be exploited remotely. An attacker can inject malicious code through the markdown FormWidget, and when other users view the generated HTML, the code will be executed in their browsers.
For more information about this vulnerability, you can refer to the GitHub advisory at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/08/GHSA-w4pj-7p68-3vgv/GHSA-w4pj-7p68-3vgv.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for october/backend.
