Igor Sak-Sakovskiy

تتعلق المشكلة بتجاوز أداة تنقية Cross-site Scripting (XSS) في phpoffice/phpspreadsheet، وهي مكتبة PHP خالصة لقراءة وكتابة ملفات جداول البيانات. يتم تحقيق هذا الالتفاف باستخدام بروتوكول JavaScript وأحرف خاصة. يمكن للمهاجم استخدام أحرف خاصة لإنشاء رابط HTML يؤدي، عند النقر عليه، إلى تنفيذ كود JavaScript تعسفي في المتصفح. المكون المعرض للخطر هو الفئة `PhpOfficePhpSpreadsheetWriterHtml`، وتحديدًا الأسلوب `generateRow`. تتضمن شروط الاستغلال قيام مستخدم بعرض ملف XML تم إنشاؤه خصيصًا لهذا الغرض.

Name of the Vulnerable Software and Affected Versions: XMB versions prior to 1.9.11.16 XMB versions prior to 1.9.12.03 Description: The issue is related to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This allows for potential malicious script execution. Recommendations: For versions prior to 1.9.11.16, update to version 1.9.11.16. For versions prior to 1.9.12.03, update to version 1.9.12.03.

The issue allows a remote attacker to inject arbitrary JavaScript in a message using nested markdown tags, leading to persistent cross-site scripting (XSS). This flaw can result in arbitrary file read and remote code execution (RCE) on the Rocket.Chat desktop app.

Name of the Vulnerable Software and Affected Versions: PunBB versions prior to 1.4.6 Description: An issue was discovered in the [email] BBcode tag, allowing an XSS vulnerability that enables injecting arbitrary JavaScript into any forum message with authentication. Recommendations: For PunBB versions prior to 1.4.6, update to version 1.4.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of the [email] BBcode tag until a patch is available.

The issue allows stored XSS via nested [email] tags with MyCode (aka BBCode).

The issue is related to Stored XSS, which can lead to Remote Code Execution.

The issue allows remote attackers to inject arbitrary JavaScript code into any message on the forum via multiple stored XSS.