PT-2024-21057 · October · October

Mayank Mehra · Published 2024-06-26 · Updated 2024-06-27 · CVE-2024-25637

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions October versions prior to 3.5.15

Description The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this issue cannot be exploited through normal browser interactions. This unescaped value is only detectable when using a proxy interception tool.

Recommendations For versions prior to 3.5.15, update to version 3.5.15 to resolve the issue. As a temporary workaround, consider restricting access to the X-October-Request-Handler Header to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-25637

GHSA-RJW8-V7RR-R563

Affected Products

October

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/25xxx/CVE-2024-25637.json · Exploit
• https://github.com/octobercms/october/security/advisories/GHSA-rjw8-v7rr-r563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25637 · Security Note
• https://osv.dev/vulnerability/GHSA-rjw8-v7rr-r563 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-25637 · Vendor Advisory
• https://github.com/octobercms/october · Note
• https://t.me/cvenotify/84503 · Telegram Post
• https://t.me/cvenotify/84649 · Telegram Post