CVE-2021-42566
published 2021-10-18CVE-2021-42566: myfactory.FMS before 7.1-912 allows XSS via the Error parameter.
PriorityP337medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
5.83%
92.2th percentile
myfactory.FMS before 7.1-912 allows XSS via the Error parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| myfactory | fms | < 7.1-912 | 7.1-912 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
exploitdb·2021-10-19·CVSS 6.1
CVE-2021-42566 [MEDIUM] myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
---
# Exploit Title: myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
# Exploit Author: RedTeam Pentesting GmbH
# Vendor Homepage: https://www.myfactory.com/
# Version: Enfold
The UID parameter gets reflected without applying any encoding to it.
A similar problem arises when the login leads to an error. This introduces a new parameter named 'Error':
http://www.example.com/ie50/system/login/SysLoginUser.aspx?Login=Error&Error=RedTeam_Error
The value of the Error parameter gets appended without encoding in the
javascript function mOnLoad resulting in the following code:
function mOnLoad(
{
var sParams;
alert('Das System konnte Sie nicht anmelden.\n RedTeam_Error');
[...]
Proof of Concept
Nuclei
myfactory FMS - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2021-42566 [MEDIUM] myfactory FMS - Cross-Site Scripting
myfactory FMS - Cross-Site Scripting
myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter.
Template:
id: CVE-2021-42566
info:
name: myfactory FMS - Cross-Site Scripting
author: madrobot,daffainfo
severity: medium
description: |
myfactory.FMS before 7.1-912 allows cross-site scripting via the Error parameter.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of a victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
remediation: |
Upgrade to the latest version to mitigate this vulnerability.
reference:
- https://www.redteam-pentesting.de/advisories/rt-sa-2021-001
- https://nvd.nist.gov/vuln/detail/CVE-2021-42566
classification:
cvss-m
2021-10-18
Published