PT-2023-12175 · Nuxeo · Nuxeo Platform

Alvaro Muñoz + 1 · Published 2023-01-05 · Updated 2023-01-11 · CVE-2021-32828

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Nuxeo Platform version 11.5.109

Description The Nuxeo Platform is an open source content management platform for building business applications. In the affected version, the oauth2 REST API is vulnerable to Reflected Cross-Site Scripting (XSS), which can be escalated to Remote Code Execution (RCE) by leveraging the automation API.

Recommendations For version 11.5.109, consider disabling the oauth2 REST API until a patch is available to prevent exploitation. Restrict access to the automation API to minimize the risk of Remote Code Execution (RCE).

Exploit

Fix

Deserialization of Untrusted Data

XSS

Weakness Enumeration

CWE-502

CWE-79

Related Identifiers

CVE-2021-32828

GHSA-X347-FC9W-W7C3

Affected Products

Nuxeo Platform

References · 7

• 🔥 https://github.com/nuxeo/nuxeo/blob/master/modules/platform/nuxeo-platform-oauth/src/main/java/org/nuxeo/ecm/webengine/oauth2/OAuth2Callback.java · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2021-072-nuxeo · Exploit
• https://osv.dev/vulnerability/GHSA-x347-fc9w-w7c3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32828 · Security Note
• https://osv.dev/vulnerability/CVE-2021-32828 · Vendor Advisory
• https://github.com/nuxeo/nuxeo · Note
• https://t.me/cibsecurity/56027 · Telegram Post