Invision Power Services IP.Board 3.3.4/3.4.6 BBcode cross site scripting

Summaryinfo

A vulnerability was found in Invision Power Services IP.Board 3.3.4/3.4.6. It has been declared as problematic. This affects an unknown function of the component BBcode Handler. The manipulation results in cross site scripting. The attack may be launched remotely. Furthermore, there is an exploit available. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Invision Power Services IP.Board 3.3.4/3.4.6 (Forum Software). Affected is some unknown processing of the component BBcode Handler. The manipulation with an unknown input leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was shared 12/13/2013 by indistic as IP.Board 3.3.x, 3.4.x Security Update as confirmed posting (Forum). The advisory is available at community.invisionpower.com. The vendor cooperated in the coordination of the public release. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. Technical details are unknown but a private exploit is available. This vulnerability is assigned to T1059.007 by the MITRE ATT&CK project.

It is declared as proof-of-concept.

Upgrading to version 3.4.6 [2013-12-13] eliminates this vulnerability. Applying the patch ipb33_patch_dec_13.zip/ipb34_patch_dec_13.zip is able to eliminate this problem. The bugfix is ready for download at community.invisionpower.com. The best possible mitigation is suggested to be patching the affected component. A possible mitigation has been published immediately after the disclosure of the vulnerability. The posting contains the following remark:

If you are an IPS Community in the Cloud customer running IP.Board 3.3 or above, no further action is necessary; we have already automatically patched your account. If you are using a version older than IP.Board 3.3, you should contact support to upgrade. If you have installed or upgraded to IP.Board 3.4.6 today, no further action is necessary; we have already updated the main download zips.

The vulnerability is also documented in the databases at OSVDB (101028†) and Secunia (SA56128†). The entries VDB-11515 and VDB-12604 are related to this item. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Forum Software

Vendor

• Invision Power Services

Name

• IP.Board

Version

• 3.3.4
• 3.4.6

License

• commercial

Website

• Vendor: https://invisioncommunity.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion