CVE-2021-27912 - Vulnerability Details - OpenCVE

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Acquia	Mautic

Configuration 1 [-]

OR	cpe:2.3:a:acquia:mautic::::::::
	cpe:2.3:a:acquia:mautic:4.0.0:alpha1::::::
	cpe:2.3:a:acquia:mautic:4.0.0:beta::::::
	cpe:2.3:a:acquia:mautic:4.0.0:rc::::::

No data.

References

Link	Providers
https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8

History

No history.

MITRE

Status: PUBLISHED

Assigner: Mautic

Published: 2021-08-30T15:55:17.220890Z

Updated: 2024-09-16T16:17:39.112Z

Reserved: 2021-03-02T00:00:00

Link: CVE-2021-27912

Vulnrichment

No data.

NVD

Status : Modified

Published: 2021-08-30T16:15:07.403

Modified: 2024-11-21T05:58:47.070

Link: CVE-2021-27912

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Mautic", "vendor": "Mautic", "versions": [{"lessThan": "3.3.4", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "4.0.0", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Reported by Hoang Nguyen https://github.com/MatisAct, Fixed by Rohit Pavaskar https://github.com/rohitp19"}], "datePublic": "2021-08-30T00:00:00", "descriptions": [{"lang": "en", "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Cross-site Scripting (XSS)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-08-30T15:55:17", "orgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e", "shortName": "Mautic"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8"}], "source": {"defect": ["MST-15"], "discovery": "EXTERNAL"}, "title": "XSS vulnerability on asset view", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@mautic.org", "DATE_PUBLIC": "2021-08-30T14:06:00.000Z", "ID": "CVE-2021-27912", "STATE": "PUBLIC", "TITLE": "XSS vulnerability on asset view"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Mautic", "version": {"version_data": [{"version_affected": "<", "version_value": "3.3.4"}, {"version_affected": "<", "version_value": "4.0.0"}]}}]}, "vendor_name": "Mautic"}]}}, "credit": [{"lang": "eng", "value": "Reported by Hoang Nguyen https://github.com/MatisAct, Fixed by Rohit Pavaskar https://github.com/rohitp19"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-79 Cross-site Scripting (XSS)"}]}]}, "references": {"reference_data": [{"name": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8", "refsource": "MISC", "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8"}]}, "source": {"defect": ["MST-15"], "discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T21:33:16.430Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8"}]}]}, "cveMetadata": {"assignerOrgId": "4e531c38-7a33-45d3-98dd-d909c0d8852e", "assignerShortName": "Mautic", "cveId": "CVE-2021-27912", "datePublished": "2021-08-30T15:55:17.220890Z", "dateReserved": "2021-03-02T00:00:00", "dateUpdated": "2024-09-16T16:17:39.112Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*", "matchCriteriaId": "EA7B8AF8-5929-4515-9EFF-9F589FA3FFDC", "versionEndExcluding": "3.3.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:acquia:mautic:4.0.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "A4B8FCED-A690-45D0-ACE1-871ADA2080F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:acquia:mautic:4.0.0:beta:*:*:*:*:*:*", "matchCriteriaId": "14D56FFE-E768-4502-BA7E-6B34BFE463B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:acquia:mautic:4.0.0:rc:*:*:*:*:*:*", "matchCriteriaId": "C536B44B-C713-47D1-9EBD-E2D94CB0561E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets."}, {"lang": "es", "value": "Mautic versiones anteriores a 3.3.4/4.0.0, son vulnerables a un ataque de tipo JS XSS en l\u00ednea cuando se visualizan activos de Mautic al usar JS en l\u00ednea en el t\u00edtulo y a\u00f1adiendo una URL de imagen rota como activo remoto. Esto s\u00f3lo puede ser aprovechado por un usuario autenticado con permiso para crear o editar activos."}], "id": "CVE-2021-27912", "lastModified": "2024-11-21T05:58:47.070", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security@mautic.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-08-30T16:15:07.403", "references": [{"source": "security@mautic.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8"}], "sourceIdentifier": "security@mautic.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@mautic.org", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}