pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations
Impact
The translation value with text including “%s” (from “%suggest%) is parsed by sprintf() even though it’s supposed to be output literally to the user.
Source excerpt · OSVAffected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
| Affected range | Recorded fix |
|---|---|
| Earlier releases before 1.1.2Ecosystem versions | 1.1.2 |
Version evidence: OSV · GHSA-m988-7375-7g2c
View original version evidence (13 explicit versions)
Original source description
Impact
The translation value with text including “%s” (from “%suggest%) is parsed by sprintf() even though it’s supposed to be output literally to the user.
The translations may be accessible by a user with comparatively lower overall access (as the translation permission cannot be scoped to certain “modules”) and a skilled attacker might be able to exploit the parsing of the translation string in the dialog box.
Patches
Workarounds
Update to version 1.1.2 or apply this patches manually https://github.com/pimcore/admin-ui-classic-bundle/commit/abd7739298f974319e3cac3fd4fcd7f995b63e4c.patch
References
- Security advisory github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-m988-7375-7g2c
- Security advisory nvd.nist.gov/vuln/detail/CVE-2023-42817
- Patch github.com/pimcore/admin-ui-classic-bundle/commit/abd7739298f974319e3cac3fd4fcd7f995b63e4c
- Source reference github.com/pimcore/admin-ui-classic-bundle