PT-2023-24892 · Pybb · Pybb

Published 2023-06-19 · Updated 2023-06-27 · CVE-2023-34461

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PyBB versions 0.1.0

Description A manual code review of the PyBB bulletin board server revealed a vulnerability that allows users to submit any type of HTML tag, which can be executed. For example, a malicious <a> tag, such as <a href=javascript:alert (1)>xss</a>, can be used to run code through JavaScript on the client side. Attackers need posting privilege to exploit this issue.

Recommendations For version 0.1.0, upgrade to version 0.1.1 to resolve the issue. As a temporary workaround for users unable to upgrade, consider removing the ability to create posts. Alternatively, remove the |safe tag from the Jinja2 template titled "post.html" in templates. Another option is to add manual validation of links in the post creation section.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-34461

GHSA-MV96-W49P-438P

Affected Products

Pybb

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34461.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-34461 · Security Note
• ❌ https://github.com/benjjvi/PyBB/security/advisories/GHSA-mv96-w49p-438p · Patch, Deleted
• ❌ https://github.com/benjjvi/PyBB/commit/5defd922ab05a193a783392d447c6538628cf854 · Patch, Deleted
• https://osv.dev/vulnerability/CVE-2023-34461 · Vendor Advisory