An issue was discovered in EspoCRM before 5.6.9. Stored XSS was executed on the Preference page as well as while sending an email when a malicious payload was inserted inside the Email Signature in the Preference page. The attacker could insert malicious JavaScript inside his email signature, which fires when the victim replies or forwards the mail, thus helping him steal victims' cookies (hence compromising their accounts).
References
Link | Resource |
---|---|
https://gauravnarwani.com/publications/CVE-2019-14546/ | Exploit Third Party Advisory |
https://github.com/espocrm/espocrm/commit/ffd3f762ce4a8de3b8962f33513e073c55d943b5 | Patch Third Party Advisory |
https://github.com/espocrm/espocrm/issues/1369 | Third Party Advisory |
https://github.com/espocrm/espocrm/releases/tag/5.6.9 | Release Notes Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2019-08-05T18:54:41
Updated: 2019-08-05T18:54:41
Reserved: 2019-08-02T00:00:00
Link: CVE-2019-14546
JSON object: View
NVD Information
Status : Analyzed
Published: 2019-08-05T19:15:11.257
Modified: 2019-08-14T11:31:18.113
Link: CVE-2019-14546
JSON object: View
Redhat Information
No data.
CWE