CVE-2018-5233

MEDIUMNuclei

Grav CMS Cross-site scripting (XSS) vulnerability

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2018-5233 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

getgrav/grav

Browse Packagist / getgrav/grav
GitHub AdvisoryBefore 1.3.0 · Fixed in 1.3.0affected

Nuclei templates

1
ProjectDiscoveryMEDIUMGrav CMS <1.3.0 - Cross-Site ScriptingCVSS 6.1

Grav CMS before 1.3.0 is vulnerable to cross-site scripting via system/src/Grav/Common/Twig/Twig.php and allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/tools.

Impact

Attackers can execute arbitrary JavaScript in victims' browsers, potentially stealing session cookies, administrative credentials, or performing actions on behalf of authenticated users.

Remediation

Upgrade Grav CMS to version 1.3.0 or later, which includes proper input sanitization to mitigate the XSS vulnerability.

WeaknessesCWE-79
Authorspikpikcu
Template tagscvecve2018xssgravgetgravvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:getgrav:grav_cms:*:*:*:*:*:*:*:*
Shodan: html:"Grav CMS"
Shodan: http.html:"grav cms"
FOFA: body="grav cms"
https://sysdream.com/news/lab/2018-03-15-cve-2018-5233-grav-cms-admin-plugin-reflected-cross-site-scripting-xss-vulnerability/ http://www.openwall.com/lists/oss-security/2018/03/15/1 https://nvd.nist.gov/vuln/detail/CVE-2018-5233 https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

4