PT-2021-23450 · Webtareas · Webtareas

Published 2021-10-08 · Updated 2021-10-15 · CVE-2021-41917

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions webTareas versions 2.4 and earlier

Description The issue allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data. This can achieve a Stored Cross-Site Scripting attack against the platform users and administrators. The affected endpoint is "/clients/editclient.php", specifically the HTTP POST cn parameter.

Recommendations For webTareas versions 2.4 and earlier, consider disabling the editing functionality in the clients section until a patch is available. Restrict access to the "/clients/editclient.php" endpoint to minimize the risk of exploitation. Avoid using the cn parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-41917

Affected Products

Webtareas

References · 4

• 🔥 https://n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-41917 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41917 · Vendor Advisory
• https://t.me/cibsecurity/30261 · Telegram Post