Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-8388

XSS possible in system console - servletresolver

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

      Description

      Issue Summary : There is a XSS possible in system console.

      Steps to reproduce :

      Scenario 1 :

      1. Open a local instance
      2. Open the link http://localhost:4502/system/console/services?filter=%22onmouseover=%22alert(%27xss%27)%22 in Internet Explorer.
      3. Chrome would auto flag XSS exploit and prevent page load

      Scenario 2 :

      1. Open a local instance
      2. Open the link http://localhost:4502/system/console/servletresolver?url=%2Fcontent%2Fdam%3Cscript%3Ealert%28%27123%27%29%3C%2Fscript%3E&method=GET  in Internet Explorer.
      3. Chrome would auto flag XSS exploit and prevent page load

      Expected Behavior : The pop up should not come up.

        Attachments

          Activity

            People

            • Assignee:
              karlpauls Karl Pauls
              Reporter:
              ashokpanghal Ashok Kumar

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 20m
                20m

                  Issue deployment