CVE-2017-7725
MEDIUMconcrete5 8.1.0 - Cross-Site Scripting via Host Header Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-7725. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This exploit demonstrates a Host Header Injection vulnerability in concrete5 v8.1.0, allowing unauthenticated attackers to inject malicious links into the database by manipulating the Host header. The PoC shows how this can lead to redirection to an attacker-controlled site.
Description
concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector.
Exploits (1)
This exploit demonstrates a Host Header Injection vulnerability in concrete5 v8.1.0, allowing unauthenticated attackers to inject malicious links into the database by manipulating the Host header. The PoC shows how this can lead to redirection to an attacker-controlled site.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N