| 제목 | Juzaweb Juzaweb CMS 3.4.2 Cross-Site Scripting |
|---|
| 설명 | Vulnerability Description
This vulnerability allows an attacker with access to the profile page to upload a malicious SVG file, even with extension filters enabled.
Impact
By exploiting this vulnerability, the attacker can execute scripts that can lead to different malicious activities, such as redirects, malware installation, among others.
To reproduce:
1) Create a new user and add it to a role with all permissions disabled;
2) Log in with that user's account;
3) Access the "Profile" page;
4) Click on the "Avatar" field and select a malicious .svg file to be uploaded;
5) Intercept the upload request with a proxy, such as Burp Suite;
6) Change the value of the "type" parameter from "image" to "file" and continue with the request;
7) Note that even if an error is returned on the front-end, the file is uploaded on the "Media" page;
8) Directly accessing the file address and the malicious payload is triggered.
|
|---|
| 원천 | ⚠️ https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_avatar_xss.md |
|---|
| 사용자 | Anonymous User |
|---|
| 제출 | 2025. 05. 24. AM 02:44 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 01. PM 12:48 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 310753 [juzaweb CMS 까지 3.4.2 Profile Page upload 업로드 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|