DWR

DWR
DWR-551

XSS weakness

View this issue in another formatViewView
- XML
- Word
- Printable

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 2.0.1
Fix Version/s: None
Component/s: Security

Documentation Required:
No

Description:

Hide
If non-existent class is called, error message with the name of the called class is shown to the user. This name is copied into the response without sufficient treatment.

Demonstration of the insertion of JavaScript code into the output page:
http://www.xxx.com/dwr/interface/<script>alert('xss')</script>.js

Show
If non-existent class is called, error message with the name of the called class is shown to the user. This name is copied into the response without sufficient treatment. Demonstration of the insertion of JavaScript code into the output page: http://www.xxx.com/dwr/interface/<script>alert('xss')</script>.js

Issue Links

Duplicate

This issue duplicates:
~~DWR-257~~ XSS flaw when including script that does not exist

Activity

Ascending order - Click to sort in descending order

David Marginian made changes - 02/Nov/11 4:07 AM

Field	Original Value	New Value
Link		This issue depends on ~~DWR-257~~ [ ~~DWR-257~~ ]

David Marginian made changes - 02/Nov/11 4:07 AM

Link

This issue duplicates ~~DWR-257~~ [ ~~DWR-257~~ ]

David Marginian made changes - 02/Nov/11 4:07 AM

Link

This issue depends on ~~DWR-257~~ [ ~~DWR-257~~ ]

Hide

Permalink

David Marginian added a comment - 02/Nov/11 4:08 AM

Issue duplicates ~~DWR-257~~.
Issue appears to be spam.

Show

David Marginian added a comment - 02/Nov/11 4:08 AM Issue duplicates ~~DWR-257~~. Issue appears to be spam.

David Marginian made changes - 02/Nov/11 4:08 AM

Status	Open [ 1 ]	Closed [ 6 ]
Resolution		Fixed [ 1 ]

People

Assignee:

David Marginian

Reporter:

Gregory LAIGNEL
Votes:

0

Watchers:

1

Dates

Created:

02/Nov/11 12:29 AM

Updated:

02/Nov/11 4:08 AM

Resolved:

02/Nov/11 4:08 AM