CVE-2020-17453

Description

WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.

Related CPE's

awso2api_manager********
vulnerable
awso2api_manager_analytics2.2.0*******
vulnerable
awso2api_manager_analytics2.5.0*******
vulnerable
awso2api_manager_analytics2.6.0*******
vulnerable
awso2api_microgateway2.2.0*******
vulnerable
awso2enterprise_integrator********
vulnerable
awso2identity_server********
vulnerable
awso2identity_server_analytics5.4.0*******
vulnerable
awso2identity_server_analytics5.4.1*******
vulnerable
awso2identity_server_analytics5.5.0*******
vulnerable

References

https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2020-1132

Vendor Advisory

https://twitter.com/JacksonHHax/status/1374681422678519813

ExploitThird Party Advisory

https://github.com/JHHAX/CVE-2020-17453-PoC

ExploitThird Party Advisory

CvssV3 impact

BaseSeverity

MEDIUM

ConfidentialityImpact

LOW

AttackComplexity

LOW

Scope

CHANGED

AttackVector

NETWORK

AvailabilityImpact

NONE

IntegrityImpact

LOW

PrivilegesRequired

NONE

BaseScore

6.1

VectorString

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Version

3.1

UserInteraction

REQUIRED

CvssV2 impact

AccessComplexity

MEDIUM

ConfidentialityImpact

NONE

AvailabilityImpact

NONE

IntegrityImpact

PARTIAL

BaseScore

4.3

VectorString

AV:N/AC:M/Au:N/C:N/I:P/A:N

Version

2.0

AccessVector

NETWORK

Authentication

NONE