Low CVE-2008-1753 EUVD-2008-1753GHSA-4r3g-w24c-gpr6

Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp

Published Apr 11, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Package: org.opencms:opencms-core Ecosystem: Maven

Description

Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.opencms:opencms-core	< 7.0.4	7.0.4	GHSA-4r3g-w24c-gpr6

References

opencms-sessions-xss(41675) vdb-entry
20080405 Alkacon OpenCms sessions.jsp searchfilter XSS mailing-list
20080410 Re: Alkacon OpenCms sessions.jsp searchfilter XSS mailing-list
28637 vdb-entry
3808 third-party-advisory