|
|
| |
| ColdFusionMX Web Sites that use the default ColdFusionMX Site-Wide Error Handler page or the default ColdFusionMX Missing Template Handler page may be susceptible to a cross-site scripting attack using the HTTP Referer[sic] header field. |
| |
Credit:
The information has been provided by T.Hara of Vagabond and Robert Fly.
|
| |
Affected Software Versions:
* ColdFusion MX 6.0 and 6.1 (All editions)
* ColdFusion MX 6.0 J2EE (All editions)
* ColdFusion MX 6.1 J2EE (All editions)
* ColdFusion 5.0 and prior versions
Technical details:
In the default error page, two ColdFusion tags are showed #error.HTTPReferer# and #error.QueryString#, both these tags are not filtered for arbitrary HTML or JavaScript code. This allows attackers to cause the web site to return third-party content (content sent by an attacker).
Solution:
A patch corresponding to this problem can be found at: http://www.macromedia.com/devnet/security/security_zone/mpsb03-06.html.
|
|
|
|
|
|
|
|
