Rymcu Forest 0.0.5: Cross-Site Scripting in Article Comments

Summary

A security flaw in Rymcu Forest's comment feature allows hackers to inject malicious code into articles, potentially stealing user data or taking control of accounts. This is a serious issue that requires immediate attention from users and developers. Update to the latest version of Rymcu Forest to fix the vulnerability.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
rymcu	forest	<= 0.0.5	–

Original title

A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected by this issue is the function XssUtils.replaceHtmlCode of the file src/main/java/com/rymcu/forest/util/XssUtils.java...

Original description

A security vulnerability has been detected in rymcu forest up to 0.0.5. Affected by this issue is the function XssUtils.replaceHtmlCode of the file src/main/java/com/rymcu/forest/util/XssUtils.java of the component Article Content/Comments/Portfolio. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvd CVSS2.0 4.0

nvd CVSS3.1 5.4

nvd CVSS4.0 5.1

Vulnerability type

CWE-79 Cross-site Scripting (XSS)

CWE-94 Code Injection

https://fx4tqqfvdw4.feishu.cn/docx/CvYzdxDNDoXWdKxvaehcvb1rnQK?from=from_copylin... Exploit Third Party Advisory
https://vuldb.com/?ctiid.347316 Permissions Required VDB Entry
https://vuldb.com/?id.347316 Third Party Advisory VDB Entry
https://vuldb.com/?submit.755037 Third Party Advisory VDB Entry