[Geoserver-devel] [JIRA] (GEOS-7545) XSS Vulnerability : Reflected Cross Site Scripting Vulnerability in TestWfsPost Service

GeoServer GeoServer Developer
1

Steve Reed created an issue

GeoServer / BugGEOS-7545

XSS Vulnerability : Reflected Cross Site Scripting Vulnerability in TestWfsPost Service

Issue Type:

BugBug

Affects Versions:

2.8.1

Assignee:

Unassigned

Components:

WFS

Created:

20/May/16 10:28 AM

Environment:

Linux Redhat 6, running in Tomcat 6.0.45 Container

Priority:

MediumMedium

Reporter:

Steve Reed

Reflected Cross Site Scripting Vulnerability in GeoServer TestWfsPost Service

Potentially malicious content can be injected into the post request and is reflected unchanged in the response which may then be actioned in the client browser.

The value of the url request parameter can be altered and submitted e.g

vjoce<a xmlns:a='http://www.w3.org/1999/xhtml'><a:body onload='alert(1)'/></a>oj93zmy1wd1

Example URL
http://localhost:8080/geoserver/TestWfsPost?form_hf_0=&url=vjoce%3Ca%20xmlns%3aa%3d%27http%3a%2f%2fwww.w3.org%2f1999%2fxhtml%27%3E%3Ca%3abody%20onload%3d%27alert%281%29%27%2f%3E%3C%2fa%3Eoj93zmy1wd1

Add Comment

Add Comment

This message was sent by Atlassian JIRA (v1000.5.2#72002-sha1:b4422fe)

Atlassian logo