GHSA-jpgw-2r9m-8qfw

Suggest an improvement
Source
https://github.com/advisories/GHSA-jpgw-2r9m-8qfw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-jpgw-2r9m-8qfw/GHSA-jpgw-2r9m-8qfw.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-jpgw-2r9m-8qfw
Aliases
Published
2023-07-05T22:40:59Z
Modified
2024-02-22T05:37:22.123015Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
Details

Impact

Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced changes which were meant to serve all uploaded files as plain text in order to prevent browsers from executing potentially dangerous files when such files are accessed directly!

The previous Nginx configuration was incorrect allowing certain browsers like Firefox to ignore the Content-Type: text/plain header on some occasions thus allowing potentially dangerous scripts to be executed.

Additionally file upload validators and parts of the HTML rendering code have been found to require additional sanitation and improvements.

Patches

  • Updated Nginx content type configuration
  • Improved file upload validation code to prevent more potentially dangerous uploads
  • Sanitization of test plan names used in the tree_view_html() function

References

Disclosed by M Nadeem Qazi and Mahshooq Zubair.

Database specific 
{
    "nvd_published_at": "2023-07-05T22:15:09Z",
    "cwe_ids": [
        "CWE-434",
        "CWE-79"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2023-07-05T22:40:59Z"
}
References

Affected packages

PyPI / kiwitcms

Package

Name
kiwitcms
View open source insights on deps.dev
Purl
pkg:pypi/kiwitcms

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
12.5

Affected versions

6.*

6.2.1
6.3
6.4
6.5
6.5.3
6.6
6.7
6.8
6.9
6.10
6.11

7.*

7.0
7.1
7.2
7.2.1
7.3

8.*

8.0
8.1
8.1.99
8.2
8.3
8.4
8.5
8.6
8.6.1
8.7
8.8
8.9

9.*

9.0
9.999

10.*

10.0
10.1
10.2
10.3
10.3.999
10.4
10.5

11.*

11.0
11.1
11.3
11.4
11.5
11.6
11.7

12.*

12.0
12.1
12.2
12.3
12.4