CVE-2021-29002: Plone CMS 5.2.3 Stored XSS Vulnerability in Site Control Panel
Summary
CVE-2021-29002: A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.site_title" parameter. Affects plone versions < 5.2.3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Plone is an open-source content management system (CMS) built on the Zope application server. It is designed for managing and publishing web content with a focus on usability, security, and extensibility. Plone offers features such as workflow management, versioning, and a rich set of add-ons. However, like any web application, it is susceptible to security vulnerabilities, including cross-site scripting (XSS) attacks, which can compromise user data and application integrity.
Vulnerability Detail
A stored cross-site scripting (XSS) vulnerability exists in Plone CMS 5.2.3, specifically in the site control panel. This vulnerability arises from improper handling of the 'form.widgets.site_title' parameter, allowing an attacker to inject malicious scripts that are stored and executed in the context of other users' sessions. The ramifications of this vulnerability can include unauthorized access to user data, session hijacking, and the potential for further exploitation of the application. The vulnerability has a CVSS score of 5.4, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict access to the site control panel for untrusted users until the package is updated. This can be done by modifying user roles and permissions in the Plone settings to limit who can access sensitive areas of the application.
Conclusion
The stored XSS vulnerability in Plone CMS 5.2.3 poses a significant risk to users and their data. It is crucial to update to the latest version of the software to mitigate this risk. Additionally, implementing temporary workarounds can help protect your application until a full update can be performed.
See every vulnerability recorded for plone →
FAQ
A stored XSS vulnerability allows an attacker to inject malicious scripts into a web application, which are then stored on the server and executed in the browsers of users who access the affected page.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without requiring any installation.
The potential impacts include unauthorized access to user sessions, data theft, and the ability for attackers to perform actions on behalf of users, leading to further exploitation.
Yes, updating to the latest version of Plone will address this vulnerability. Always ensure you are running the most recent version to maintain security.
If you cannot update immediately, consider restricting access to the site control panel and monitoring your application for any suspicious activity.
References
Related vulnerabilities
Recent vulnerabilities recorded for plone.
