PT-2024-32676 · Unknown+2 · Sulumediabundle+2

Wachterjohannes · Published 2024-10-03 · Updated 2024-10-08 · CVE-2024-47617

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sulu versions prior to 2.6.5 Sulu versions prior to 2.5.21

Description This issue allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS, affecting the SuluMediaBundle component. It is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allow attackers to steal sensitive information, manipulate the website's content, or perform actions on behalf of the victim.

Recommendations For versions prior to 2.6.5, update to version 2.6.5 or later. For versions prior to 2.5.21, update to version 2.5.21 or later. As a temporary workaround, consider implementing additional input validation and output encoding for the slug parameter in the MediaStreamController's downloadAction method. Alternatively, configuring a Web Application Firewall (WAF) to filter potentially malicious input could serve as a temporary mitigation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-47617

GHSA-6784-9C82-VR85

Affected Products

Sulu

Sulu Cms

Sulumediabundle

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47617.json · Exploit
• https://github.com/sulu/sulu/commit/eeacd14b6cf55f710084788140d40ebb00314b29 · Patch
• https://github.com/sulu/sulu/security/advisories/GHSA-6784-9c82-vr85 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47617 · Security Note
• https://osv.dev/vulnerability/GHSA-6784-9c82-vr85 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-47617 · Vendor Advisory
• https://github.com/sulu/sulu · Note
• https://github.com/sulu/sulu/blob/2.6/src/Sulu/Bundle/MediaBundle/Controller/MediaStreamController.php#L106 · Note
• https://github.com/sulu/sulu/commit/a5a5ae555d282e88ff8559d38cfb46dea7939bda · Note
• https://t.me/cvedetector/6900 · Telegram Post
• https://twitter.com/CVEnew/status/1841849532453101638 · Twitter Post
• https://t.me/cvenotify/97424 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1841882333839860137 · Twitter Post