PT-2018-18404 · Sencha · Sencha Ext Js

Daniel Fritsch · Published 2018-07-05 · Updated 2018-09-04 · CVE-2018-8046

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Sencha Ext JS versions 4 through 6.5.3

Description: The issue concerns the getTip() method of Action Columns, which is susceptible to cross-site scripting (XSS) attacks. This occurs even when HTML-escaped data is passed, as the method un-escapes the data. If the tooltip contains user-controlled data, an attacker could exploit this to create an XSS attack, despite developers taking precautions to escape the data.

Recommendations: For Sencha Ext JS versions 4 through 6.5.3, ensure that all data passed to the getTip() method of Action Columns is correctly sanitized to prevent XSS attacks. As a temporary workaround, consider disabling the use of user-controlled data in tooltips until a patch is available. Update to version 6.6.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-8046

Affected Products

Sencha Ext Js

References · 4

• http://examples.sencha.com/extjs/6.6.0/release-notes.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8046 · Security Note
• http://seclists.org/fulldisclosure/2018/Jul/8 · Note