Vulnerability-Lookup

CNVD-2018-21851

Vulnerability from cnvd - Published: 2018-10-26

Title

Drupal跨站脚本漏洞（CNVD-2018-21851）

Description

Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal 7.x版本中的搜索自动填充功能存在跨站脚本漏洞，该漏洞源于程序对用户提交的输入验证不当。远程攻击者可借助特制的URL利用该漏洞在用户的Web浏览器中执行脚本。

Severity

中

Patch Name

Drupal跨站脚本漏洞（CNVD-2018-21851）的补丁

Patch Description

Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。 Drupal 7.x版本中的搜索自动填充功能存在跨站脚本漏洞，该漏洞源于程序对用户提交的输入验证不当。远程攻击者可借助特制的URL利用该漏洞在用户的Web浏览器中执行脚本。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接: https://www.suse.com/support/update/announcement/2018/suse-su-20183343-1/

Reference

https://www-01.ibm.com/support/docview.wss?uid=ibm10735685

Impacted products

Name
Drupal Drupal 7.*

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-7603"
    }
  },
  "description": "Drupal\u662fDrupal\u793e\u533a\u6240\u7ef4\u62a4\u7684\u4e00\u5957\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u514d\u8d39\u3001\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\u3002\r\n\r\nDrupal 7.x\u7248\u672c\u4e2d\u7684\u641c\u7d22\u81ea\u52a8\u586b\u5145\u529f\u80fd\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\u9a8c\u8bc1\u4e0d\u5f53\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684URL\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7528\u6237\u7684Web\u6d4f\u89c8\u5668\u4e2d\u6267\u884c\u811a\u672c\u3002",
  "discovererName": "unKnow",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5:\r\nhttps://www.suse.com/support/update/announcement/2018/suse-su-20183343-1/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-21851",
  "openTime": "2018-10-26",
  "patchDescription": "Drupal\u662fDrupal\u793e\u533a\u6240\u7ef4\u62a4\u7684\u4e00\u5957\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u514d\u8d39\u3001\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\u3002\r\n\r\nDrupal 7.x\u7248\u672c\u4e2d\u7684\u641c\u7d22\u81ea\u52a8\u586b\u5145\u529f\u80fd\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9\u7528\u6237\u63d0\u4ea4\u7684\u8f93\u5165\u9a8c\u8bc1\u4e0d\u5f53\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684URL\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7528\u6237\u7684Web\u6d4f\u89c8\u5668\u4e2d\u6267\u884c\u811a\u672c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Drupal\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2018-21851\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Drupal Drupal 7.*"
  },
  "referenceLink": "https://www-01.ibm.com/support/docview.wss?uid=ibm10735685",
  "serverity": "\u4e2d",
  "submitTime": "2018-10-26",
  "title": "Drupal\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2018-21851\uff09"
}

CVE-2018-7603 (GCVE-0-2018-7603)

Vulnerability from cvelistv5 – Published: 2019-01-15 22:00 – Updated: 2024-09-17 02:57

Title

Search Autocomplete

Summary

In Drupal's 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn't sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.

Severity

No CVSS data available.

CWE

A vulnerability in search auto complete a 3rd party Druapl contributed module. Search Autocomplete allows an attacker to execute javascript code to causing xss. Affected releases are Drupal 3rd party module - Search Autocomplete: versions prior to 7.x-4.8.

Assigner

drupal

References

1 reference

URL	Tags
https://www.drupal.org/sa-contrib-2018-070	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Drupal	3rd party module - Search Autocomplete	Affected: 7.x-4.x , < 7.x-4.8 (custom)

Credits

Reported By: Simon Kapadia Fixed By: Dominique CLAUSE

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:31:04.972Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.drupal.org/sa-contrib-2018-070"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "3rd party module - Search Autocomplete",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "7.x-4.8",
              "status": "affected",
              "version": "7.x-4.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Reported By: Simon Kapadia Fixed By: Dominique CLAUSE"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In Drupal\u0027s 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn\u0027t sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A vulnerability in search auto complete a 3rd party Druapl contributed module. Search Autocomplete allows an attacker to execute javascript code to causing xss.  Affected releases are Drupal 3rd party module - Search Autocomplete: versions prior to 7.x-4.8.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-15T21:57:01.000Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.drupal.org/sa-contrib-2018-070"
        }
      ],
      "source": {
        "advisory": "https://www.drupal.org/sa-contrib-2018-070",
        "discovery": "UNKNOWN"
      },
      "title": "Search Autocomplete",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "AKA": "",
          "ASSIGNER": "security@drupal.org",
          "DATE_PUBLIC": "",
          "ID": "CVE-2018-7603",
          "STATE": "PUBLIC",
          "TITLE": "Search Autocomplete"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "3rd party module - Search Autocomplete",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "platform": "",
                            "version_affected": "\u003c",
                            "version_name": "7.x-4.x",
                            "version_value": "7.x-4.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Drupal"
              }
            ]
          }
        },
        "configuration": [],
        "credit": [
          {
            "lang": "eng",
            "value": "Reported By: Simon Kapadia Fixed By: Dominique CLAUSE"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Drupal\u0027s 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn\u0027t sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments."
            }
          ]
        },
        "exploit": [],
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 0,
            "baseSeverity": "NONE",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:N",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "A vulnerability in search auto complete a 3rd party Druapl contributed module. Search Autocomplete allows an attacker to execute javascript code to causing xss.  Affected releases are Drupal 3rd party module - Search Autocomplete: versions prior to 7.x-4.8."
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.drupal.org/sa-contrib-2018-070",
              "refsource": "CONFIRM",
              "url": "https://www.drupal.org/sa-contrib-2018-070"
            }
          ]
        },
        "solution": [],
        "source": {
          "advisory": "https://www.drupal.org/sa-contrib-2018-070",
          "defect": [],
          "discovery": "UNKNOWN"
        },
        "work_around": []
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2018-7603",
    "datePublished": "2019-01-15T22:00:00.000Z",
    "dateReserved": "2018-03-01T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:57:47.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-21851

CVE-2018-7603 (GCVE-0-2018-7603)

Tags

Sightings

Nomenclature