Vulnerabilidad en eGroupWare y Moodle (CVE-2008-1502)
Gravedad CVSS v2.0:
MEDIA
Tipo:
CWE-79
Neutralización incorrecta de la entrada durante la generación de la página web (Cross-site Scripting)
Fecha de publicación:
25/03/2008
Última modificación:
09/04/2025
Descripción
La función _bad_protocol_once en el archivo phpgwapi/inc/class.kses.inc.php en KSES, como es usado en eGroupWare versiones anteriores a 1.4.003, Moodle versiones anteriores a 1.8.5 y otros productos, permite a los atacantes remotos omitir el filtrado de HTML y conducir ataques de tipo cross-site scripting (XSS) por medio de una cadena que contiene protocolos URL especialmente diseñados.
Impacto
Puntuación base 2.0
4.30
Gravedad 2.0
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:egroupware:egroupware:*:*:*:*:*:*:*:* | 1.4.002 (incluyendo) | |
| cpe:2.3:a:egroupware:egroupware:1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:egroupware:egroupware:1.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:egroupware:egroupware:1.0.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:egroupware:egroupware:1.2.106-2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:egroupware:egroupware:1.4.001:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* | 1.8.4 (incluyendo) | |
| cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html
- http://secunia.com/advisories/29491
- http://secunia.com/advisories/30073
- http://secunia.com/advisories/30986
- http://secunia.com/advisories/31017
- http://secunia.com/advisories/31018
- http://secunia.com/advisories/31167
- http://secunia.com/advisories/32400
- http://secunia.com/advisories/32446
- http://www.debian.org/security/2008/dsa-1691
- http://www.debian.org/security/2009/dsa-1871
- http://www.egroupware.org/changelog
- http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110
- http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml
- http://www.openwall.com/lists/oss-security/2008/07/08/14
- http://www.securityfocus.com/bid/28424
- http://www.vupen.com/english/advisories/2008/0989/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41435
- https://usn.ubuntu.com/658-1/
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html
- http://docs.moodle.org/en/Release_Notes#Moodle_1.8.5
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html
- http://secunia.com/advisories/29491
- http://secunia.com/advisories/30073
- http://secunia.com/advisories/30986
- http://secunia.com/advisories/31017
- http://secunia.com/advisories/31018
- http://secunia.com/advisories/31167
- http://secunia.com/advisories/32400
- http://secunia.com/advisories/32446
- http://www.debian.org/security/2008/dsa-1691
- http://www.debian.org/security/2009/dsa-1871
- http://www.egroupware.org/changelog
- http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110
- http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml
- http://www.openwall.com/lists/oss-security/2008/07/08/14
- http://www.securityfocus.com/bid/28424
- http://www.vupen.com/english/advisories/2008/0989/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41435
- https://usn.ubuntu.com/658-1/
- https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html