DWR

DWR
DWR-551

XSS weakness

View this issue in another formatViewView
- XML
- Word
- Printable

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 2.0.1
Fix Version/s: None
Component/s: Security

Documentation Required:
No

Description:

Hide
If non-existent class is called, error message with the name of the called class is shown to the user. This name is copied into the response without sufficient treatment.

Demonstration of the insertion of JavaScript code into the output page:
http://www.xxx.com/dwr/interface/<script>alert('xss')</script>.js

Show
If non-existent class is called, error message with the name of the called class is shown to the user. This name is copied into the response without sufficient treatment. Demonstration of the insertion of JavaScript code into the output page: http://www.xxx.com/dwr/interface/<script>alert('xss')</script>.js

Issue Links

Duplicate

This issue duplicates:
~~DWR-257~~ XSS flaw when including script that does not exist

Activity

Ascending order - Click to sort in descending order

Hide

Permalink

David Marginian added a comment - 02/Nov/11 4:08 AM

Issue duplicates ~~DWR-257~~.
Issue appears to be spam.

Show

David Marginian added a comment - 02/Nov/11 4:08 AM Issue duplicates ~~DWR-257~~. Issue appears to be spam.

People

Assignee:

David Marginian

Reporter:

Gregory LAIGNEL
Votes:

0

Watchers:

1

Dates

Created:

02/Nov/11 12:29 AM

Updated:

02/Nov/11 4:08 AM

Resolved:

02/Nov/11 4:08 AM