CVE-2024-25637: Reflected XSS via X-October-Request-Handler Header
Impact
The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interactions. This unescaped value is only detectable when using a proxy interception tool.
Patches
This issue has been patched in v3.5.15.
References
Credits to: - Mayank Mehra
For more information If you have any questions or comments about this advisory: Email us at hello@octobercms.com
Other sources
October is a self-hosted CMS platform based on the Laravel PHP Framework. The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interactions. This unescaped value is only detectable when using a proxy interception tool. This issue has been patched in version 3.5.15.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25637?
CVE-2024-25637 is considered to have no significant impact as it cannot be exploited through normal browser interactions.
How do I fix CVE-2024-25637?
To mitigate CVE-2024-25637, ensure you are using October CMS version 3.5.15 or later.
What software is affected by CVE-2024-25637?
CVE-2024-25637 affects versions of October CMS from 3.2 up to, but not including, 3.5.15.
What is the nature of the vulnerability in CVE-2024-25637?
CVE-2024-25637 involves a lack of sanitization for the X-October-Request-Handler header which may reflect unescaped HTML.
Can CVE-2024-25637 be exploited remotely?
No, CVE-2024-25637 cannot be exploited remotely through normal web browser activity.