#VU21740 Cross-site scripting in Openfire - CVE-2015-6972

Description

Vulnerability allows a remote attacker to perform XSS attacks.

The vulnerability is caused by an input validation error when processing data passed via the "groupchatName" parameter to plugins/clientcontrol/create-bookmark.jsp, via the "urlName" parameter to plugins/clientcontrol/create-bookmark.jsp, via the  "hostname" parameter to server-session-details.jsp, and via the  "search" parameter to group-summary.jsp. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in victim's browser in security context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

Remediation

External links

• http://hyp3rlinx.altervista.org/advisories/AS-OPENFIRE-XSS.txt
• http://packetstormsecurity.com/files/133558/Openfire-3.10.2-Cross-Site-Scripting.html
• https://security.gentoo.org/glsa/201612-50
• https://www.exploit-db.com/exploits/38191/