Description
UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfiguration action. Attackers with ROLE_AGENT can inject malicious script into the identifier field, which is persisted and executed when other members access the configuration update page.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
uvdesk core-framework
Default version status: unaffected
0 to < 1.1.7affected1.1.7unaffected
pkg:composer/uvdesk/core-frameworkuvdesk community-skeleton
Default version status: unaffected
0 to < 1.1.8affected1.1.8unaffected
pkg:composer/uvdesk/community-skeletonReferences
- https://github.com/uvdesk/core-framework/commit/e5e92d1f5bdb24d1b96751213fb427035736371f ↗
- https://github.com/uvdesk/core-framework/blob/v1.1.6/Resources/views/SwiftMailer/manageConfigurations.html.twig#L324 ↗
- https://github.com/uvdesk/core-framework/blob/v1.1.6/Controller/SwiftMailer.php#L38-L46 ↗
- https://hackmd.io/@leediay/B1Cz5voFGg ↗
- https://github.com/uvdesk/core-framework/releases/tag/v1.1.7 ↗
- https://github.com/uvdesk/community-skeleton/releases/tag/v1.1.8 ↗
- https://github.com/uvdesk/core-framework ↗
- https://www.vulncheck.com/advisories/uvdesk-core-framework-before-1.1.7-stored-xss-via-swiftmailer ↗