PT-2009-1322 · Six Apart · Movable Type

Takeshi Terada · Published 2009-01-05 · Updated 2011-09-07 · CVE-2008-5845

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 4.23

Description The issue allows remote attackers to inject arbitrary web script or HTML via various fields, including MTEntryAuthorUsername, MTAuthorDisplayName, MTEntryAuthorDisplayName, or MTCommenterName in a Profile View template, listing or edit screens in the CMS app, TrackBack titles, or user archive names on published Community Blog templates. This is related to the HTML sanitization library.

Recommendations For versions prior to 4.23, update to version 4.23 or later to resolve the issue. As a temporary workaround, consider restricting user input in the mentioned fields to minimize the risk of exploitation. Avoid using the MTEntryAuthorUsername, MTAuthorDisplayName, MTEntryAuthorDisplayName, and MTCommenterName fields in Profile View templates, and limit access to listing and edit screens in the CMS app until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2008-5845

Affected Products

Movable Type

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-5845 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5845 · Note
• http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000031.html · Note
• http://jvn.jp/en/jp/JVN45658190/index.html · Note
• http://movabletype.org/mt_423_change_log.html · Note