CVE-2018-15913: XSS
An issue was discovered in Cloudera Manager 5.x through 5.15.0. One type of page in Cloudera Manager uses a 'returnUrl' parameter to redirect the user to another page in Cloudera Manager once a wizard is completed. The validity of this parameter was not checked. As a result, the user could be automatically redirected to an attacker's external site or perform a malicious JavaScript function that results in cross-site scripting (XSS). This was fixed by not allowing any value in the returnUrl parameter with patterns such as http://, https://, //, or javascript. The only exceptions to this rule are the SAML Login/Logout URLs, which remain supported since they are explicitly configured and they are not passed via the returnUrl parameter.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-15913.
What is the severity of CVE-2018-15913?
The severity of CVE-2018-15913 is medium with a CVSS score of 6.1.
What is the affected software for CVE-2018-15913?
The affected software for CVE-2018-15913 is Cloudera Manager 5.x through 5.15.0.
How does CVE-2018-15913 exploit work?
CVE-2018-15913 exploits a vulnerability in Cloudera Manager where it does not check the validity of the 'returnUrl' parameter, allowing an attacker to redirect a user to a malicious page.
Is there a fix available for CVE-2018-15913?
Yes, Cloudera has released a security bulletin with detailed steps to fix CVE-2018-15913. Please refer to their documentation for more information.