PT-2009-1322 · Six Apart · Movable Type

Takeshi Terada · Publicado 2009-01-05 · Atualizado 2011-09-07 · CVE-2008-5845

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 4.23

Description The issue allows remote attackers to inject arbitrary web script or HTML via various fields, including MTEntryAuthorUsername, MTAuthorDisplayName, MTEntryAuthorDisplayName, or MTCommenterName in a Profile View template, listing or edit screens in the CMS app, TrackBack titles, or user archive names on published Community Blog templates. This is related to the HTML sanitization library.

Recommendations For versions prior to 4.23, update to version 4.23 or later to resolve the issue. As a temporary workaround, consider restricting user input in the mentioned fields to minimize the risk of exploitation. Avoid using the MTEntryAuthorUsername, MTAuthorDisplayName, MTEntryAuthorDisplayName, and MTCommenterName fields in Profile View templates, and limit access to listing and edit screens in the CMS app until the issue is resolved.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-5845

Produtos afetados

Movable Type

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5845 · Nota
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html · Nota
• http://jvn.jp/en/jp/JVN45658190/index.html · Nota
• http://movabletype.org/mt_423_change_log.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5845 · Nota de Segurança