جزئیات آسیب‌پذیری
CVE-2026-39379
GeoNetwork: Reflected XSS through client-side template injection
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.0.0 until 4.2.15 and 4.4.10, requesting a nonexistent or unauthorized service URL can cause an error page to reflect attacker-controlled request content inside an AngularJS application without adequately neutralizing it for template evaluation. A remote attacker can induce a victim, including an administrator, to open a crafted link so the reflected value is evaluated as an AngularJS template expression. Combined with known AngularJS sandbox-escape techniques, this can execute arbitrary JavaScript in the victim's authenticated browser session, disclose information, or perform actions as the victim. This issue is fixed in versions 4.2.15 and 4.4.10.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| geonetwork | core-geonetwork | >= 3.0.0, <= 3.12.12 | CVEProject cvelistV5 (CNA) |
| geonetwork | core-geonetwork | >= 4.0.0-alpha.1, <= 4.0.6 | CVEProject cvelistV5 (CNA) |
| geonetwork | core-geonetwork | >= 4.2.0, < 4.2.15 | CVEProject cvelistV5 (CNA) |
| geonetwork | core-geonetwork | >= 4.4.0, < 4.4.10 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۵- https://github.com/geonetwork/core-geonetwork/security/advisories/GHSA-2v4m-fw6c-g78f x_refsource_CONFIRM
- https://github.com/geonetwork/core-geonetwork/commit/5cacdfaa6db88ef6787495b496a0871c0058b7f4 x_refsource_MISC
- https://github.com/geonetwork/core-geonetwork/commit/dd99c2ffb642f89b8bf72bafd04d824c9fc0d0ef x_refsource_MISC
- https://github.com/geonetwork/core-geonetwork/releases/tag/4.2.15 x_refsource_MISC
- https://github.com/geonetwork/core-geonetwork/releases/tag/4.4.10 x_refsource_MISC
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۸/۱۲
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۳
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- GitHub_M
- اولویت کلون
- به‌زودی
پیش‌بینی بهره‌برداری (EPSS)
امتیاز EPSS برای این CVE هنوز منتشر نشده است.
ارزیابی SSVC (CISA)
- Automatable
- no
- Exploitation
- none
- Technical Impact
- partial
ضعف‌ها (CWE)
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- CWE-1336Improper Neutralization of Special Elements Used in a Template Engine