CVE-2023-46722: Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Impact This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites.
Proof of Concept Step 1. Go to /admin and login. Step 2. In Documents, go to home -> click on Sample Content -> click Document folder Step 3. Upload file PDF content XSS payload
Patches Apply patches https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c.patch https://github.com/pimcore/admin-ui-classic-bundle/commit/19fda2e86557c2ed4978316104de5ccdaa66d8b9.patch
Workarounds Update to version 1.2.0 or apply patches manually https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c.patch https://github.com/pimcore/admin-ui-classic-bundle/commit/19fda2e86557c2ed4978316104de5ccdaa66d8b9.patch
Other sources
The Pimcore Admin Classic Bundle provides a backend UI for Pimcore. Prior to version 1.2.0, a cross-site scripting vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 1.2.0 to receive a patch or, as a workaround, apply the patch manually.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability CVE-2023-46722?
CVE-2023-46722 is a vulnerability in Pimcore Admin Classic Bundle that allows for cross-site scripting (XSS) attacks in PDF previews.
What is the impact of CVE-2023-46722?
The vulnerability has the potential to steal user cookies and gain unauthorized access to user accounts or redirect users to malicious sites.
How can an attacker exploit CVE-2023-46722?
An attacker can exploit CVE-2023-46722 by injecting malicious scripts into PDF previews, which can then execute in a user's browser.
How do I fix CVE-2023-46722?
To fix CVE-2023-46722, update to version 1.2.0 of the Pimcore Admin Classic Bundle package.
What are the Common Weakness Enumeration (CWE) IDs associated with CVE-2023-46722?
The CWE IDs associated with CVE-2023-46722 are CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page) and CWE-79 (Improper Neutralization of Input During Web Page Generation).