CVE-2021-27909

MEDIUMNuclei

XSS vulnerability on password reset page

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-27909 has a selected CVSS score of 6.3 (medium); EIP currently links 1 Nuclei template.

Description

For Mautic versions prior to 3.3.4/4.0.0, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL could allow an attacker to execute Javascript code. The attacker would be required to convince or trick the target into clicking a password reset URL with the vulnerable parameter utilized.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

Mautic

Browse Mautic / Mautic
CVE ListBefore 3.3.4affected
Before 4.0.0affected

mautic/core

Browse Packagist / mautic/core
GitHub AdvisoryBefore 3.3.4 · Fixed in 3.3.4affected
4.0.0-alpha1 to < 4.0.0 · Fixed in 4.0.0affected

Nuclei templates

1
ProjectDiscoveryMEDIUMMautic <3.3.4 - Cross-Site ScriptingCVSS 6.1

Mautic before 3.3.4 contains a cross-site scripting vulnerability on the password reset page in the bundle parameter of the URL. An attacker can inject arbitrary script, steal cookie-based authentication credentials, and/or launch other attacks.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to potential data theft or unauthorized actions.

Remediation

Upgrade Mautic to version 3.3.4 or later to mitigate this vulnerability.

WeaknessesCWE-79
Authorskiransau
Template tagscve2021cvemauticxssacquiavuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*
Shodan: title:"Mautic"
Shodan: http.title:"mautic"
FOFA: title="mautic"
Google: intitle:"mautic"
https://github.com/mautic/mautic/security/advisories/GHSA-32hw-3pvh-vcvc https://nvd.nist.gov/vuln/detail/CVE-2021-27909 https://github.com/ARPSyndicate/cvemon https://github.com/ARPSyndicate/kenzer-templates

Source: ProjectDiscovery

References

5