Detections
Analytics
Sophos Web Protection Appliance end-user-/errdoc.php 'msg' Parameter XSS
medium Nessus Plugin ID 66024
Language:
Synopsis
The remote host is running a web application that is affected by a cross-site scripting vulnerability.Description
The Sophos Web Protection application running on the remote host is affected by a cross-site scripting (XSS) vulnerability in the /end-user-/errdoc.php script due to improper sanitization of user-supplied input passed to the 'msg' parameter. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user's browser session.Note that the application is reportedly affected by additional vulnerabilities; however, this plugin has not tested for them.
Solution
Upgrade to Sophos Web Protection Appliance version 3.7.8.2 or later.See Also
Plugin Details
Severity: Medium
ID: 66024
File Name: sophos_web_protection_xss.nasl
Version: 1.11
Type: remote
Family: CGI abuses : XSS
Published: 4/18/2013
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.4
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS v3
Risk Factor: Medium
Base Score: 4.7
Temporal Score: 4.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:sophos:web_appliance, x-cpe:/a:sophos:sophos_web_protection
Required KB Items: installed_sw/sophos_web_protection
Exploit Available: true
Exploit Ease: No exploit is required
Exploited by Nessus: true
Patch Publication Date: 4/1/2013
Vulnerability Publication Date: 4/3/2013
Reference Information
CVE: CVE-2013-2643
BID: 58834