PT-2022-12191 · Django · Django Cms

Sahil Dhar · Published 2022-01-12 · Updated 2022-01-20 · CVE-2021-44649

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Django CMS version 3.7.3

Description The issue arises from the lack of validation of the plugin type parameter when generating error messages for an invalid plugin type, leading to a Cross Site Scripting (XSS) issue. This allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.

Recommendations For Django CMS version 3.7.3, as a temporary workaround, consider restricting the use of the plugin type parameter until a patch is available. Avoid using the plugin type parameter in error messages for invalid plugin types to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-44649

GHSA-HX7C-QPFQ-XCRP

PYSEC-2022-7

Affected Products

Django Cms

References · 11

• 🔥 https://sahildhar.github.io/blogpost/Django-CMS-Reflected-XSS-Vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44649 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44649 · Vendor Advisory
• https://django-cms.org/en/blog/2020/07/22/django-cms-security-updates-1 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-7 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hx7c-qpfq-xcrp · Vendor Advisory
• https://github.com/divio/django-cms · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/django-cms/PYSEC-2022-7.yaml · Note
• https://t.me/cvenotify/25282 · Telegram Post
• https://t.me/cibsecurity/35327 · Telegram Post
• https://github.com/advisories/GHSA-hx7c-qpfq-xcrp · Note