PT-2020-15945 · Silverstripe · Silverstripe-Advancedreports

Ahpaleus · Published 2020-09-03 · Updated 2022-05-24 · CVE-2020-25102

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions silverstripe-advancedreports versions 1.0 through 2.0

Description The issue allows for Cross-Site Scripting (XSS) due to the possibility of injecting and storing malicious JavaScript code. This affects the "report preview" when an SVG document is provided in the Description parameter, specifically at the "admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item" endpoint.

Recommendations For versions 1.0 through 2.0, consider disabling the report preview feature in the admin/advanced-reports/DataObjectReport/EditForm/field/DataObjectReport/item endpoint until a patch is available. Restrict access to the Description parameter to minimize the risk of exploitation. Avoid using the Description parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-25102

GHSA-8F2X-HV9R-MH9R

Affected Products

Silverstripe-Advancedreports

References · 6

• 🔥 https://gist.github.com/ahpaleus/c3bd2d41d306544ca3158569335d12f2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-25102 · Security Note
• https://osv.dev/vulnerability/GHSA-8f2x-hv9r-mh9r · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25102 · Vendor Advisory
• https://github.com/nyeholt/silverstripe-advancedreports · Note
• https://github.com/nyeholt/silverstripe-advancedreports/releases · Note