PT-2020-19358 · Codologic · Codoforum

Published 2020-02-15 · Updated 2020-02-20 · CVE-2020-7050

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Codologic Codoforum versions 4.8.4 and earlier

Description The issue allows for a DOM-based XSS attack. When creating a new topic, a user can add a poll that is automatically loaded into the DOM when the thread or topic is opened. Since session cookies lack the HttpOnly flag, an attacker can steal authentication cookies, potentially leading to account takeovers.

Recommendations For Codologic Codoforum versions 4.8.4 and earlier, as a temporary workaround, consider disabling the poll feature until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using session cookies without the HttpOnly flag until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Incorrect Permission

Weakness Enumeration

CWE-79

CWE-732

Related Identifiers

CVE-2020-7050

Affected Products

Codoforum

References · 5

• https://codologic.com/forum/index.php?u=/topic/12638/codoforum-4-8-8-released-and-the-future#post-23845 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7050 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7050 · Security Note
• https://t.me/cvenotify/1053 · Telegram Post
• https://linkedin.com/posts/polina-voronina-896819b5_discovered-by-polina-voronina-jan-15-activity-6634436086540054528-dDgg · Note