PT-2021-22494 · Invision Power Services · Invision Community

Simon Scannell · Published 2021-08-17 · Updated 2022-07-12 · CVE-2021-39249

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Invision Community versions prior to 4.6.5.1

Description The issue allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt rand function. This predictability can be exploited to conduct reflected XSS attacks.

Recommendations For versions prior to 4.6.5.1, update to version 4.6.5.1 or later to resolve the issue. As a temporary workaround, consider restricting file uploads until the update is applied.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2021-39249

Affected Products

Invision Community

References · 6

• 🔥 https://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-39249 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39249 · Vendor Advisory
• https://invisioncommunity.com/release-notes/4651-r102 · Vendor Advisory
• https://t.me/cvenotify/19565 · Telegram Post
• https://t.me/cibsecurity/27473 · Telegram Post