CVE-2024-3938CWE-20

The "reset password" login page accepted an HTML injection via URL parameters

Medium · published July 25, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

The "reset password" login page accepted an HTML injection via URL parameters.

This has already been rectified via patch, and as such it cannot be demonstrated via Demo site link. Those interested to see the vulnerability may spin up a http://localhost:8082/dotAdmin/#/public/login?resetEmailSent=true&resetEmail=%3Ch1%3E%3Ca%20href%3D%22https:%2F%2Fgoogle.com%22%3ECLICK%20ME%3C%2Fa%3E%3C%2Fh1%3E

This will result in a view along these lines:

* OWASP Top 10 - A03: Injection

* CVSS Score: 5.4

* AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator

* https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N&... https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-07-25T21:17Z
EPSS history
Timeline
  • 25 JUL 21:17Z
    The "reset password" login page accepted an HTML injection via URL parameters
    cvelistv5