CVE Vulnerability

CVE-2020-5283

ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a CVS repository exposed by an otherwise trusted ViewVC instance that also has the `show_subdir_lastmod` feature enabled. The attack vector involves files with unsafe names (names that, when embedded into an HTML stream, would cause the browser to run unwanted code), which themselves can be challenging to create. This vulnerability is patched in versions 1.2.1 and 1.1.28.

2.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

3.5 /10

CVSS v3.0 : LOW

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/viewvc/viewvc/issues/211 Exploit Issue Tracking
https://github.com/viewvc/viewvc/commit/ad0f966e9a997b17d853a6972ea283d4dcd70fa8 Patch Third Party Advisory
https://github.com/viewvc/viewvc/security/advisories/GHSA-xpxf-fvqv-7mfg Mitigation Patch
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2Q2STF2MKT24HXZ3YZIU7CN6F6QM67I5/
Configurations

Configuration 1

cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*
cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*
Information

Published : 2020-04-03 12:15

Updated : 2020-05-15 06:15

NVD link : CVE-2020-5283

Mitre link : CVE-2020-5283

Products Affected
No products.
CWE
CWE-79