PT-2024-38651 · Kofax · Totalagility

Abderrahmane Bounhidja + 1 · Published 2024-12-06 · Updated 2024-12-06 · CVE-2024-7875

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Tungsten Automation (Kofax) TotalAgility versions all through 7.9.0.25.0.954

Description The issue allows for Reflected XSS attacks through manipulation of the mfpScreenResolutionWidth parameter in a form sent to the "/TotalAgility/Kofax/BrowserDevice/ScanFront.aspx" endpoint. This enables the injection of malicious JavaScript code, potentially leading to information leaks. Exploitation is limited to POST requests and requires a proper VIEWSTATE parameter, which reduces the risk of a successful attack.

Recommendations For versions all through 7.9.0.25.0.954, as a temporary workaround, consider restricting access to the /TotalAgility/Kofax/BrowserDevice/ScanFront.aspx endpoint until a patch is available. Additionally, avoid using the mfpScreenResolutionWidth parameter in the affected form until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-7875

Affected Products

Totalagility

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-7875 · Security Note
• https://cert.pl/posts/2024/12/CVE-2024-7874 · Note
• https://cert.pl/en/posts/2024/12/CVE-2024-7874 · Note
• https://tungstenautomation.com/products/totalagility · Note
• https://twitter.com/VulmonFeeds/status/1865154878319849658 · Twitter Post
• https://twitter.com/CVEnew/status/1865142691501346937 · Twitter Post