PT-2023-6806 · Viewvc · Viewvc

Cmpilatopublished · Published 2023-01-02 · Updated 2023-01-24 · CVE-2023-22456

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions ViewVC versions prior to 1.2.2 ViewVC versions prior to 1.1.29

Description The issue is a cross-site scripting vulnerability that affects ViewVC, a browser interface for CVS and Subversion version control repositories. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by an otherwise trusted ViewVC instance. The attack vector involves files with unsafe names, which themselves can be challenging to create.

Recommendations For versions prior to 1.2.2, update to at least version 1.2.2. For versions prior to 1.1.29, update to at least version 1.1.29. For ViewVC 1.0.x, edit the ViewVC EZT view templates to manually HTML-escape changed paths during rendering by wrapping references to changed paths with [format "html"] and [end]. For most users, this means changing [changes.path] to [format "html"][changes.path][end]. This workaround should be reverted after upgrading to a patched version of ViewVC.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-07676

CVE-2023-22456

DLA-3266-1

GHSA-J4MX-F97J-GC5G

MGASA-2023-0019

Affected Products

Viewvc

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22456.json · Exploit
• https://github.com/viewvc/viewvc/releases/tag/1.1.29 · Patch
• https://github.com/viewvc/viewvc/releases/tag/1.2.2 · Patch
• https://ubuntu.com/security/CVE-2023-22456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-22456 · Security Note
• https://advisories.mageia.org/MGASA-2023-0019.html · Security Note
• https://debian.org/lts/security/2023/dla-3266 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3266-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07676 · Security Note
• https://osv.dev/vulnerability/CVE-2023-22456 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-22456 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-22456 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0019 · Vendor Advisory
• https://github.com/viewvc/viewvc/issues/311 · Note
• https://github.com/viewvc/viewvc/security/advisories/GHSA-j4mx-f97j-gc5g · Note