search

GavickPro / Meet-Gavern

Meet Gavern Template for Joomla! 3.0
42 stars 41 forks source link

Possible xss injection #203

Closed milicasss closed 9 years ago

milicasss commented 9 years ago

Owasp Zap found a possible xss injection in meet_gavern 1.3.1 HTTP request was altered in a way that javascript was set in cookie parameter gkusernameless and the response contained it in img tag that retrieves the gravatar image. It turns out that in the login form the cookie is exploded and the content is echoed into src and alt attributes. It probably requires some kind of sanitization because it is a potential security issue.

dziudek commented 9 years ago

Hello,

I will analyze this issue and I will fix it in the upcoming 1.4 release. Thank you for your report.

dziudek commented 9 years ago

Problem fixed:

https://github.com/GavickPro/Meet-Gavern/commit/99a9b327943b2e3d0d8969ea133332d4d2491bed https://github.com/GavickPro/Meet-Gavern/commit/5902281750e2973abde30ff9527428b488d2d954