ikiwiki before 3.20110328 does not ascertain whether the htmlscrubber plugin is enabled during processing of the "meta stylesheet" directive, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences in (1) the default stylesheet or (2) an alternate stylesheet.

Update to latest upstream version 3.20110328.

Security fixes :

  - Possible JavaScript insertion via insufficient     htmlscrubbing of alternate stylesheets. (CVE-2011-1401)

    - JavaScript insertion via insufficient checking in       comments. (CVE-2011-0428)

See http://ikiwiki.info/news/ for the full list of changes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to upstream version 3.20100815.7.

Security fixes :

  - Possible JavaScript insertion via insufficient     htmlscrubbing of alternate stylesheets. (CVE-2011-1401)

    - JavaScript insertion via insufficient checking in       comments. (CVE-2011-0428)

    - JavaScript insertion via insufficient htmlscrubbing of       comments. (CVE-2010-1673)

See http://git.ikiwiki.info/?p=ikiwiki;a=blobdiff;f=debian/changelog;hb=3.
20100815.7;hpb=3.20100722 for the full list of changes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to latest upstream version 3.20110328.

Security fix: Possible JavaScript insertion via insufficient htmlscrubbing of alternate stylesheets. (CVE-2011-1401)

See http://ikiwiki.info/news/ for the full list of changes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Tango discovered that ikiwiki, a wiki compiler, is not validating if the htmlscrubber plugin is enabled or not on a page when adding alternative stylesheets to pages. This enables an attacker who is able to upload custom stylesheets to add malicious stylesheets as an alternate stylesheet, or replace the default stylesheet, and thus conduct cross-site scripting attacks.

ID	Name	Product	Family	Severity
53518	Fedora 14 : ikiwiki-3.20110328-1.fc14 (2011-5180)	Nessus	Fedora Local Security Checks	low
53517	Fedora 13 : ikiwiki-3.20100815.7-1.fc13 (2011-5173)	Nessus	Fedora Local Security Checks	low
53466	Fedora 15 : ikiwiki-3.20110328-1.fc15 (2011-5249)	Nessus	Fedora Local Security Checks	low
53341	Debian DSA-2214-1 : ikiwiki - missing input validation	Nessus	Debian Local Security Checks	low

Detections

Analytics

CVE-2011-1401

medium

Tenable Plugins

low

low

low

low