{"id":19793,"date":"2023-03-23T14:14:37","date_gmt":"2023-03-23T13:14:37","guid":{"rendered":"https:\/\/herolab.usd.de\/?page_id=19793"},"modified":"2023-03-23T15:36:43","modified_gmt":"2023-03-23T14:36:43","slug":"usd-2023-0001","status":"publish","type":"page","link":"https:\/\/herolab.usd.de\/en\/security-advisories\/usd-2023-0001\/","title":{"rendered":"usd-2023-0001"},"content":{"rendered":"<p>[et_pb_section fb_built=\"1\" _builder_version=\"4.16\" _module_preset=\"default\" background_color=\"#2E353D\" custom_padding=\"||0px|||\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_row _builder_version=\"4.20.2\" _module_preset=\"default\" hover_enabled=\"0\" global_colors_info=\"{}\" theme_builder_area=\"post_content\" sticky_enabled=\"0\"][et_pb_column type=\"4_4\" _builder_version=\"4.16\" _module_preset=\"default\" global_colors_info=\"{}\" theme_builder_area=\"post_content\"][et_pb_text _builder_version=\"4.20.2\" _module_preset=\"cc5ac6f4-ebbd-4b3f-bc92-4dfc1f15fe2c\" hover_enabled=\"0\" global_colors_info=\"{}\" theme_builder_area=\"post_content\" sticky_enabled=\"0\"]<\/p>\n<h1>usd-2023-0001 | Friendica 2022.12 - Cross-Site Scripting (XSS)<\/h1>\n<h1><\/h1>\n<p><strong>Advisory ID<\/strong>: usd-2023-0001<br \/><strong>Product<\/strong>: F<span>riendica<\/span><br \/><strong>Affected Version<\/strong>: <span>2022.12<\/span><br \/><strong>Vulnerability Type<\/strong>: <span>Cross-Site Scripting (CWE-79)<\/span><br \/><strong>Security Risk<\/strong>: High<br \/><strong>Vendor URL<\/strong>: <a href=\"https:\/\/friendi.ca\/\" target=\"_blank\" rel=\"noopener\">https:\/\/friendi.ca\/<\/a><br \/><strong>Vendor acknowledged vulnerability<\/strong>: Yes<br \/><strong>Vendor Status:\u00a0<\/strong>Fixed<\/p>\n<h3>Description<\/h3>\n<p>The open source application Friendica is used to set up a decentralized social network. The focus lies on effective privacy settings and interoperability with third-party services. <span>A reflected XSS vulnerability was found in the\u00a0<\/span><em>404 Not Found<\/em><span>\u00a0error page of Friendica 2022.12.<\/span><\/p>\n<h3>Proof of Concept<\/h3>\n<p><span>The following request injects JavaScript code into the 404 error page.<\/span><\/p>\n<div class=\"codehilite\" style=\"background: #263238;color: #eff\">\n<pre>GET \/communityjh99m%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3eov1pz\/local?accounttype=organisation HTTP\/1.1\nHost: localhost\n[...]<\/pre>\n<\/div>\n<h3><\/h3>\n<p><span>The following screenshot shows, that the JavaScript code is executed in the context of the application:<\/span><br \/><span><\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/herolab.usd.de\/wp-content\/uploads\/sites\/9\/2023\/03\/usd-2023-0001-proof.png\" width=\"786\" height=\"394\" alt=\"\" class=\"wp-image-19805 alignnone size-full\" srcset=\"https:\/\/herolab.usd.de\/wp-content\/uploads\/sites\/9\/2023\/03\/usd-2023-0001-proof.png 786w, https:\/\/herolab.usd.de\/wp-content\/uploads\/sites\/9\/2023\/03\/usd-2023-0001-proof-480x241.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 786px, 100vw\" \/><\/p>\n<h3><\/h3>\n<h3>Fix<\/h3>\n<p><span>It is recommended to treat all input on the website as potentially dangerous. <\/span><span>Hence, all output that is dynamically generated based on user-controlled data should be encoded according to its context. <\/span><span>The majority of programming languages support standard procedures for encoding meta characters.<\/span><\/p>\n<h3>References<\/h3>\n<ul>\n<li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/xss\/\" target=\"_blank\" rel=\"noopener\">https:\/\/owasp.org\/www-community\/attacks\/xss\/<\/a><\/li>\n<li><a href=\"https:\/\/friendi.ca\/2023\/01\/15\/friendica-2023-01-released\/\" target=\"_blank\" rel=\"noopener\">https:\/\/friendi.ca\/2023\/01\/15\/friendica-2023-01-released\/<\/a><\/li>\n<\/ul>\n<h3>Timeline<\/h3>\n<ul>\n<li><strong>2023-01-05:<\/strong> Vulnerability identified by Christian P\u00f6schl<\/li>\n<li><strong style=\"font-size: 16px\">2023-01-09<\/strong>: First contact request made to the vendor<\/li>\n<li><strong>2023-01-15:<\/strong> Hotfix released by vendor (Friendica 2023.01)<\/li>\n<\/ul>\n<h3>Credits<\/h3>\n<p>This security vulnerability was identified by Christian P\u00f6schl of usd AG.<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>usd-2023-0001 | Friendica 2022.12 - Cross-Site Scripting (XSS) Advisory ID: usd-2023-0001Product: FriendicaAffected Version: 2022.12Vulnerability Type: Cross-Site Scripting (CWE-79)Security Risk: HighVendor URL: https:\/\/friendi.ca\/Vendor acknowledged vulnerability: YesVendor Status:\u00a0Fixed Description The open source application Friendica is used to set up a decentralized social network. The focus lies on effective privacy settings and interoperability with third-party services. A reflected [&hellip;]<\/p>\n","protected":false},"author":96,"featured_media":0,"parent":16124,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"class_list":["post-19793","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/19793","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/users\/96"}],"replies":[{"embeddable":true,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/comments?post=19793"}],"version-history":[{"count":0,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/19793\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/16124"}],"wp:attachment":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/media?parent=19793"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}