[SLING-8388] XSS possible in system console - servletresolver

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Servlets Resolver 2.5.2
• Fix Version/s: Servlets Resolver 2.5.4
• Component/s: ResourceResolver
• Assignee: Karl Pauls
• Reporter: Ashok Kumar
• Created: 03/May/19 04:12
• Updated: 15/May/19 20:37
• Resolved: 06/May/19 10:44

Description

Issue Summary : There is a XSS possible in system console.

Steps to reproduce :

Scenario 1 :

1. Open a local instance
2. Open the link http://localhost:4502/system/console/services?filter=%22onmouseover=%22alert(%27xss%27)%22 in Internet Explorer.
3. Chrome would auto flag XSS exploit and prevent page load

Scenario 2 :

1. Open a local instance
2. Open the link http://localhost:4502/system/console/servletresolver?url=%2Fcontent%2Fdam%3Cscript%3Ealert%28%27123%27%29%3C%2Fscript%3E&method=GET  in Internet Explorer.
3. Chrome would auto flag XSS exploit and prevent page load

Expected Behavior : The pop up should not come up.

Issue Links

• links to: GitHub Pull Request #4