PT-2020-7155 · Unknown · Koala Framework

Nsams · Published 2020-01-08 · Updated 2020-01-14 · CVE-2011-5018

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Koala Framework versions prior to 2011-11-21

Description The issue is related to a security problem where an attacker can execute malicious scripts via the request uri parameter, potentially leading to unauthorized actions on the affected system.

Recommendations For versions prior to 2011-11-21, update to a version released after 2011-11-21 to resolve the issue. As a temporary workaround, consider restricting access to the request uri parameter to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-5018

Affected Products

Koala Framework

References · 6

• 🔥 http://cloudscan.me/2011/12/cve-2011-5018-koala-framework-xss.html · Exploit
• https://github.com/koala-framework/koala-framework/commit/59f81ea6bd8ef96c04a706a3ca453cd656284faa · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-5018 · Security Note
• https://groups.google.com/forum/#%21topic/koala-framework-dev/wgHDD7N7qhk · Note
• https://t.me/cibsecurity/9160 · Telegram Post
• https://t.me/cibsecurity/9056 · Telegram Post