CVE-2018-1000528
published 2018-06-26CVE-2018-1000528: GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form…
PriorityP338medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
46.32%
98.7th percentile
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f5918885954dcceb75606001.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | gosa | < gosa 2.7.4+reloaded3-5 (bookworm) | gosa 2.7.4+reloaded3-5 (bookworm) |
| gosa_project | gosa | >= 0 < 2.7.4+reloaded3-5 | 2.7.4+reloaded3-5 |
| gosa_project | gosa | >= 0 < 2.7.4+reloaded3-5 | 2.7.4+reloaded3-5 |
| gosa_project | gosa | >= 0 < 2.7.4+reloaded3-5 | 2.7.4+reloaded3-5 |
| gosa_project | gosa | >= 0 < 2.7.4+reloaded3-5 | 2.7.4+reloaded3-5 |
| gosa_project | gosa | >= 0 < 2.7.4+reloaded2-9ubuntu1.1 | 2.7.4+reloaded2-9ubuntu1.1 |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.1MEDIUM
vendor_debian6.1LOW
vendor_ubuntu6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GOsa vulnerabilities
vendor_ubuntu·2020-10-28·CVSS 6.1
CVE-2019-11187 [MEDIUM] GOsa vulnerabilities
Title: GOsa vulnerabilities
Summary: Several security issues were fixed in gosa.
Fabian Henneke discovered that GOsa incorrectly handled client cookies. An
authenticated user could exploit this with a crafted cookie to perform
file deletions in the context of the user account that runs the web
server. (CVE-2019-14466)
It was discovered that GOsa incorrectly handled user access control. A
remote attacker could use this issue to log into any account with a
username containing the word "success". (CVE-2019-11187)
Fabian Henneke discovered that GOsa was vulnerable to cross-site scripting
attacks via the change password form. A remote attacker could use this
flaw to run arbitrary web scripts. (CVE-2018-1000528)
Instructions: In general, a standard system update will make all the necessary
Debian
CVE-2018-1000528: gosa - GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 cont...
vendor_debian·2018·CVSS 6.1
CVE-2018-1000528 [MEDIUM] CVE-2018-1000528: gosa - GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 cont...
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f5918885954dcceb75606001.
Scope: local
bookworm: resolved (fixed in 2.7.4+reloaded3-5)
bullseye: resolved (fixed in 2.7.4+reloaded3-5)
forky: resolved (fixed in 2.7.4+reloaded3-5)
sid: resolved (fixed in 2.7.4+reloaded3-5)
trixie: resolved (fixed in 2.7.4+reloaded3-5)
GHSA
GHSA-fh4v-6j27-m5mf: GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password for
ghsa_unreviewed·2022-05-14
CVE-2018-1000528 [MEDIUM] CWE-79 GHSA-fh4v-6j27-m5mf: GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password for
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f5918885954dcceb75606001.
OSV
gosa vulnerabilities
osv·2020-10-28·CVSS 6.1
CVE-2019-14466 [MEDIUM] gosa vulnerabilities
gosa vulnerabilities
Fabian Henneke discovered that GOsa incorrectly handled client cookies. An
authenticated user could exploit this with a crafted cookie to perform
file deletions in the context of the user account that runs the web
server. (CVE-2019-14466)
It was discovered that GOsa incorrectly handled user access control. A
remote attacker could use this issue to log into any account with a
username containing the word "success". (CVE-2019-11187)
Fabian Henneke discovered that GOsa was vulnerable to cross-site scripting
attacks via the change password form. A remote attacker could use this
flaw to run arbitrary web scripts. (CVE-2018-1000528)
OSV
CVE-2018-1000528: GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password for
osv·2018-06-26·CVSS 6.1
CVE-2018-1000528 [MEDIUM] CVE-2018-1000528: GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password for
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f5918885954dcceb75606001.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/gosa-project/gosa-core/commit/56070d6289d47ba3f5918885954dcceb75606001https://github.com/gosa-project/gosa-core/issues/14https://lists.debian.org/debian-lts-announce/2018/07/msg00028.htmlhttps://www.debian.org/security/2018/dsa-4239https://github.com/gosa-project/gosa-core/commit/56070d6289d47ba3f5918885954dcceb75606001https://github.com/gosa-project/gosa-core/issues/14https://lists.debian.org/debian-lts-announce/2018/07/msg00028.htmlhttps://www.debian.org/security/2018/dsa-4239
2018-06-26
Published