PT-2023-22993 · Unknown · Prestashop

Mflasquin + 1 · Published 2023-04-25 · Updated 2024-03-06 · CVE-2023-30838

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.0.4 and 1.7.8.9

Description The issue concerns the ValidateCore::isCleanHTML() method of PrestaShop, which misses hijackable events, leading to cross-site scripting (XSS) injection. This is allowed by the presence of pre-setup @keyframes methods. The XSS can hijack HTML attributes and can be triggered without any interaction by the visitor or administrator, making it as dangerous as a trivial XSS attack. Unlike other attacks that target HTML attributes and are triggered without user interaction, this one can hijack every HTML element, increasing the danger due to its complete HTML elements scope.

Recommendations For PrestaShop versions prior to 8.0.4, update to version 8.0.4 or later. For PrestaShop versions prior to 1.7.8.9, update to version 1.7.8.9 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-PRESTASHOP-2023-30838

CVE-2023-30838

GHSA-FH7R-996Q-GVCP

Affected Products

Prestashop

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30838.json · Exploit
• https://github.com/PrestaShop/PrestaShop/commit/dc682192df0e4b0d656a8e645b29ca1b9dbe3693 · Patch
• https://github.com/PrestaShop/PrestaShop/commit/46408ae4b02f3b8b1bb6e9dc63af5bcd858abd9c · Patch
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fh7r-996q-gvcp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30838 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30838 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-prestashop-2023-30838 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fh7r-996q-gvcp · Vendor Advisory
• https://github.com/PrestaShop/PrestaShop · Note
• https://github.com/PrestaShop/PrestaShop/releases/tag/8.0.4 · Note
• https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.9 · Note
• https://t.me/cibsecurity/62840 · Telegram Post
• https://t.me/true_secator/4331 · Telegram Post