persistent xss possible - requires commit access
Bug #777804 reported by
David
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| git (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned | ||
Bug Description
Binary package hint: gitweb
I am reporting a persistent xss vector in gitweb, note this requires a
user to have commit access to a repository that gitweb is configured
to display. The vector is the fact that gitweb "serves" up xml files -
which can (just as gitweb does) embed html that could be used to
perform a cross-site scripting attack.
e.g. (lol.xml).
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://
<html xmlns="http://
<head>
</head>
<script>
</html>
and viewed at http://
CVE References
| Changed in gitweb (Ubuntu): | |
| assignee: | nobody → Kees Cook (kees) |
| visibility: | private → public |
| Changed in gitweb (Ubuntu): | |
| assignee: | Kees Cook (kees) → nobody |
| visibility: | private → public |
| Changed in gitweb (Ubuntu): | |
| status: | New → Confirmed |
Revision history for this message
| Jamie Strandboge (jdstrand) wrote | #2 |
| affects: | gitweb (Ubuntu) → git (Ubuntu) |
To post a comment you must log in.
The requirement on commit access for this to be an issue vastly reduces the impact and severity of this issue.