CVE-2021-25934: OpenNMS Horizon vulnerable to XSS
Summary
CVE-2021-25934: OpenNMS Horizon vulnerable to XSS. Affects org.opennms:opennms versions >= 18.0.0-1, <= 27.1.0-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenNMS Horizon is an open-source network management platform that provides network monitoring and management capabilities. It is widely used for monitoring and managing large networks. The vulnerability described in this report affects versions opennms-18.0.0-1 through opennms-27.1.0-1 of OpenNMS Horizon. This vulnerability allows for Stored Cross-Site Scripting (XSS) attacks due to the lack of input validation in the createRequisitionedNode() function's node-label parameter. As a result, an attacker can inject arbitrary scripts that will be stored in the database.
Vulnerability Detail
The vulnerability in OpenNMS Horizon allows an attacker to execute arbitrary scripts in the context of a user's browser. This can lead to various security risks, including unauthorized access to sensitive information, session hijacking, and phishing attacks. The lack of input validation in the node-label parameter allows an attacker to inject malicious scripts that will be stored in the database and executed when accessed by other users. This vulnerability can be exploited by tricking a user into visiting a specially crafted webpage or clicking on a malicious link.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the provided patches or update to a non-affected version of OpenNMS Horizon.
Conclusion
The vulnerability in OpenNMS Horizon allows for Stored Cross-Site Scripting (XSS) attacks, which can have serious security implications. It is crucial to update to a patched version or apply the provided patches to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.opennms:opennms →
FAQ
This vulnerability allows an attacker to execute arbitrary scripts in the context of a user's browser, potentially leading to unauthorized access, session hijacking, and phishing attacks.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your version of OpenNMS Horizon is affected by this vulnerability. Simply provide your pom.xml file, and Vulert will analyze it for any known vulnerabilities.
There are currently no known public exploits for this vulnerability. However, it is important to apply the patches or update to a non-affected version to mitigate the risk.
Yes, this vulnerability has been assigned the CVE identifier CVE-2021-25934.
You can find more information about this vulnerability in the OpenNMS GitHub advisory database (https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-9hhc-cc6c-99hh/GHSA-9hhc-cc6c-99hh.json).
References
Related vulnerabilities
Recent vulnerabilities recorded for org.opennms:opennms.
