Wiz
Vulnerability DatabaseGHSA-gc5h-6jx9-q2qh

GHSA-gc5h-6jx9-q2qh: 
PHP vulnerability analysis and mitigation

Overview

The Ibexa Admin UI Bundle (ezsystems/ezplatform-admin-ui) contains a DOM-based Cross-site Scripting (XSS) vulnerability in its file upload widget, identified as CVE-2024-39318. The vulnerability affects versions 3.3. and 4.6. of the software and was discovered on July 31, 2024. The vulnerability was responsibly reported by security researcher Alec Romano (Ibexa Advisory).

Technical details

The vulnerability is a DOM-based XSS that exists in the file upload widget where filenames containing malicious payloads are not properly escaped. The issue has been assigned a CVSS v4.0 score of 4.8 (Moderate severity) with the following vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N. The vulnerability is classified as CWE-79: Cross-site Scripting (GitHub Advisory).

Impact

The vulnerability allows for XSS attacks through specially crafted filenames. While the impact is limited by the requirement for authentication and user interaction, successful exploitation could lead to execution of malicious scripts in the context of the authenticated user's session. The XSS is not persistent and only executes during the file upload process (Ibexa Advisory).

Mitigation and workarounds

The vulnerability has been patched in versions 3.3.39 of ezsystems/ezplatform-admin-ui and 4.6.9 of ibexa/admin-ui. The fix ensures proper escaping of XSS payloads in filenames. Users are advised to upgrade to these patched versions as no workarounds are available (Ibexa Advisory).

Additional resources

Source: This report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues

Cloud threat landscape

Cloud threat landscape

A comprehensive threat intelligence database of cloud security incidents, actors, tools and techniques

PEACH

PEACH

A step-by-step framework for modeling and improving SaaS and PaaS tenant isolation

Get a personalized demo

Ready to see Wiz in action?

“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo