CVE-2024-1245: Stored XSS in Concrete CMS file tags and description attributes
Summary
CVE-2024-1245: Concrete CMS vulnerable to stored XSS in file tags and description attributes. Affects concrete5/concrete5 versions >= 9.0.0RC1, < 9.2.5. Fixed in 9.2.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Concrete CMS is an open-source content management system that allows users to create and manage websites. It provides various features such as file management, user authentication, and content editing. However, versions of Concrete CMS prior to 9.2.5 are vulnerable to a stored cross-site scripting (XSS) attack in the file tags and description attributes. This vulnerability arises due to insufficient sanitization of administrator-entered file attributes on the Edit Attributes page. An attacker with administrative privileges can inject malicious code into these attributes, which will be executed when another administrator opens the same file for editing.
Vulnerability Detail
The stored XSS vulnerability in Concrete CMS can have serious consequences. By injecting malicious code into file tags or description attributes, an attacker can execute arbitrary scripts in the context of other administrators who access the affected file. This can lead to various attacks, such as stealing sensitive information, performing actions on behalf of the victim, or spreading malware. The severity of this vulnerability is rated as low (CVSS score of 2.4), but it still poses a significant risk to the security and integrity of the affected Concrete CMS installations.
How To Fix
Minimum fixed version
9.2.5
This is the first release that contains the fix.
composer require concrete5/concrete5:9.2.5Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, a temporary workaround can be implemented by manually sanitizing the file tags and description attributes. This can be done by validating and sanitizing user input to remove any potentially malicious code. However, this workaround is not recommended as it may be error-prone and may not provide complete protection against all possible attack vectors. It is strongly advised to update to the latest version as soon as possible.
Conclusion
The stored XSS vulnerability in Concrete CMS versions prior to 9.2.5 can allow an attacker to execute arbitrary code in the context of other administrators. It is crucial to update to the latest version to mitigate this vulnerability and protect the system from potential attacks. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for concrete5/concrete5 →
FAQ
Concrete CMS is an open-source content management system that allows users to create and manage websites. It provides various features such as file management, user authentication, and content editing.
Stored XSS (Cross-Site Scripting) is a type of vulnerability where an attacker injects malicious code into a website or web application, which is then stored and executed by other users who access the affected content.
The vulnerability in Concrete CMS arises due to insufficient sanitization of file tags and description attributes entered by administrators. This allows an attacker with administrative privileges to inject and execute malicious code when another administrator opens the same file for editing.
The stored XSS vulnerability in Concrete CMS can lead to various attacks, such as stealing sensitive information, performing actions on behalf of the victim, or spreading malware. It poses a risk to the security and integrity of the affected Concrete CMS installations.
To protect your Concrete CMS installation, it is recommended to update to version 9.2.5 or later, which includes the necessary patches to mitigate this vulnerability. Regularly applying updates and security patches is essential to ensure the security of your system.
Related vulnerabilities
Recent vulnerabilities recorded for concrete5/concrete5.
