Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-18325

CVE-2020-18325: Cross-site Scripting in intelliants/subrion

6.1

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-18325
GHSA ID
GHSA-pcwq-7wrw-r8jv
EPSS Score
0.81013%
CWE
CWE-79
Published
3/5/2022
Updated
2/3/2023
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
intelliants/subrioncomposer<= 4.2.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability manifests in configuration panels where user-controlled parameters (like 'v[allow_animated_gifs]') are reflected in responses without proper HTML encoding. The PoC shows direct parameter reflection in /panel/configuration/pictures/ endpoint. In typical MVC CMS structures:- 1) Configuration controllers handle form submissions and rendering, making them likely candidates for missing output encoding- 2) The existence of similar vulnerabilities across multiple panels (pictures/mail/miscellaneous) suggests a pattern in configuration handling functions- 3) Menu add/edit functionality is another common XSS vector in CMS admin panels. While exact function names can't be verified without source code, these are logical locations based on the described attack vectors and CMS architecture patterns.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

Multilpl* *ross Sit* S*riptin* (XSS) vuln*r**ility *xists in Int*lli*nts Su*rion *MS v*.*.* in t** *on*i*ur*tion p*n*l.

Reasoning

T** vuln*r**ility m*ni**sts in *on*i*ur*tion p*n*ls w**r* us*r-*ontroll** p*r*m*t*rs (lik* 'v[*llow_*nim*t**_*i*s]') *r* r**l**t** in r*spons*s wit*out prop*r *TML *n*o*in*. T** Po* s*ows *ir**t p*r*m*t*r r**l**tion in /p*n*l/*on*i*ur*tion/pi*tur*s/