CVE-2024-47617

Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle component. The vulnerability is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allow attackers to steal sensitive information, manipulate the website's content, or perform actions on behalf of the victim. This vulnerability is fixed in 2.6.5 and 2.5.21.

CVSS v3 6.1 MEDIUM

6.1^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/sulu/sulu/commit/a5a5ae555d282e88ff8559d38cfb46dea7939bda	Product
https://github.com/sulu/sulu/commit/eeacd14b6cf55f710084788140d40ebb00314b29	Patch
https://github.com/sulu/sulu/security/advisories/GHSA-6784-9c82-vr85	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sulu:sulu:2.5.20:::::::*
	cpe:2.3:a:sulu:sulu:2.6.4:::::::*

History

No history.

Information

Published : 2024-10-03 15:15

Updated : 2024-10-08 14:23

NVD link : CVE-2024-47617

Mitre link : CVE-2024-47617

CVE.ORG link : CVE-2024-47617

JSON object : View

Products Affected

sulu

sulu

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2024-47617", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "published": "2024-10-03T15:15:14.937", "references": [{"url": "https://github.com/sulu/sulu/commit/a5a5ae555d282e88ff8559d38cfb46dea7939bda", "tags": ["Product"], "source": "security-advisories@github.com"}, {"url": "https://github.com/sulu/sulu/commit/eeacd14b6cf55f710084788140d40ebb00314b29", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/sulu/sulu/security/advisories/GHSA-6784-9c82-vr85", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Sulu is a PHP content management system. This vulnerability allows an attacker to inject arbitrary HTML/JavaScript code through the media download URL in Sulu CMS. It affects the SuluMediaBundle component. The vulnerability is a Reflected Cross-Site Scripting (XSS) issue, which could potentially allow attackers to steal sensitive information, manipulate the website's content, or perform actions on behalf of the victim. This vulnerability is fixed in 2.6.5 and 2.5.21."}, {"lang": "es", "value": "Sulu es un sistema de gesti\u00f3n de contenido PHP. Esta vulnerabilidad permite a un atacante inyectar c\u00f3digo HTML/JavaScript arbitrario a trav\u00e9s de la URL de descarga de medios en Sulu CMS. Afecta al componente SuluMediaBundle. La vulnerabilidad es un problema de Cross-Site Scripting (XSS) Reflejado, que podr\u00eda permitir a los atacantes robar informaci\u00f3n confidencial, manipular el contenido del sitio web o realizar acciones en nombre de la v\u00edctima. Esta vulnerabilidad se ha corregido en las versiones 2.6.5 y 2.5.21."}], "lastModified": "2024-10-08T14:23:38.597", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sulu:sulu:2.5.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7EFCD27-01AC-4C20-9F92-E1F1F0D9DFE4"}, {"criteria": "cpe:2.3:a:sulu:sulu:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2DEEB21-3616-43D0-935D-95FDCFC361F7"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}