~ / search / GHSA-6xmx-85x3-4cv2

GHSA-6xmx-85x3-4cv2

Stored XSS via SVG File Upload

Source: GitHub Advisory Database (reviewed) Low CVE-2023-49279

Packages

EcosystemPackageAffectedFixed in
NuGet Umbraco.CMS >= 7.0.0, < 7.15.11 7.15.11
NuGet Umbraco.CMS >= 8.0.0, < 8.18.9 8.18.9
NuGet Umbraco.CMS >= 9.0.0, < 10.7.0 10.7.0
NuGet Umbraco.CMS >= 11.0.0, < 11.5.0 11.5.0
NuGet Umbraco.CMS >= 12.0.0, < 12.2.0 12.2.0

Details

As written in the advisory (Markdown source, shown as plain text).

#### Impact A user with access to the backoffice can upload SVG files that include scripts. If the user can trick another user to load the media directly in a browser, the scripts can be executed. #### Workaround Implement the server side file validation https://docs.umbraco.com/umbraco-cms/reference/security/serverside-file-validation or Serve all media from an different host (e.g cdn) that where umbraco is hosted

References

External links from the advisory. They lead to third-party sites.