{"id":21711,"date":"2023-12-21T14:04:21","date_gmt":"2023-12-21T13:04:21","guid":{"rendered":"https:\/\/herolab.usd.de\/?page_id=21711"},"modified":"2024-01-02T10:15:12","modified_gmt":"2024-01-02T09:15:12","slug":"usd-2022-0058","status":"publish","type":"page","link":"https:\/\/herolab.usd.de\/en\/security-advisories\/usd-2022-0058\/","title":{"rendered":"usd-2022-0058"},"content":{"rendered":"

[et_pb_section fb_built=\"1\" _builder_version=\"4.21.0\" _module_preset=\"default\" background_color=\"#2E353D\" custom_padding=\"||0px|||\" global_colors_info=\"{}\"][et_pb_row _builder_version=\"4.21.0\" _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_column type=\"4_4\" _builder_version=\"4.21.0\" _module_preset=\"default\" global_colors_info=\"{}\"][et_pb_text _builder_version=\"4.23.1\" _module_preset=\"default\" custom_padding=\"||13px|||\" global_colors_info=\"{}\"]<\/p>\n

usd-2022-0058 | Stored XSS in Client Name in CPTO 6.3.8.6<\/h1>\n

<\/h1>\n

Advisory ID<\/strong>: usd-2022-0058
Product<\/strong>: Cash Point & Transport Optimizer CPTO
Affected Version<\/strong>: 6.3.8.6 (#718) 06.07.2021
Vulnerability Type<\/strong>: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Security Risk<\/strong>: Medium
Vendor URL<\/strong>: https:\/\/www.sesami.io\/<\/a>
Vendor acknowledged vulnerability<\/strong>: Yes
Vendor Status<\/strong>: Fixed
CVE number<\/strong>: CVE-2023-31297
CVE Link<\/strong>: Pending<\/p>\n

Description<\/h3>\n

An admin user can exploit all other users that are assigned to the same client by inserting a JavaScript into the Name<\/strong> field of a client. The payload triggers whenever the client selection, the licenses or the homepage are browsed.<\/p>\n

Fix<\/h3>\n

Users should update CPTO to its current version.<\/p>\n

User-supplied input should always be sanitized.<\/p>\n

References<\/h3>\n

https:\/\/www.owasp.org\/index.php\/Cross-site_Scripting_(XSS)<\/a><\/p>\n

Timeline<\/h3>\n
    \n
  • 2022-11-03<\/strong>: Vulnerabilities discovered by Marcus Nilsson.<\/li>\n
  • 2022-11-28<\/strong>: The Responsible Disclosure tries to establish contact with vendor for the first time.<\/li>\n
  • 2023-04-27<\/strong>: CVE IDs are requested and subsequently reserved.<\/li>\n
  • 2023-05-12<\/strong>: Trying to establish contact via phone and email has been unsucessful, usd AG's customer notifies the team that vulnerabilities should by fixed come autumn.<\/li>\n
  • 2023-11-23<\/strong>: Marcus Nilsson got in touch with vendor, the advisories shall be published without a Proof-Of-Concept of the exploits in December.<\/li>\n
  • 2023-12-21<\/strong>: Advisory published by usd AG.<\/li>\n<\/ul>\n

    Credits<\/h3>\n

    This security vulnerability was found by Marcus Nilsson of usd AG.<\/p>\n

    [\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

    usd-2022-0058 | Stored XSS in Client Name in CPTO 6.3.8.6 Advisory ID: usd-2022-0058Product: Cash Point & Transport Optimizer CPTOAffected Version: 6.3.8.6 (#718) 06.07.2021Vulnerability Type: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Security Risk: MediumVendor URL: https:\/\/www.sesami.io\/Vendor acknowledged vulnerability: YesVendor Status: FixedCVE number: CVE-2023-31297CVE Link: Pending Description An admin user can exploit […]<\/p>\n","protected":false},"author":114,"featured_media":0,"parent":16124,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"class_list":["post-21711","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/21711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/users\/114"}],"replies":[{"embeddable":true,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/comments?post=21711"}],"version-history":[{"count":5,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/21711\/revisions"}],"predecessor-version":[{"id":21847,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/21711\/revisions\/21847"}],"up":[{"embeddable":true,"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/pages\/16124"}],"wp:attachment":[{"href":"https:\/\/herolab.usd.de\/en\/wp-json\/wp\/v2\/media?parent=21711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}