Title: Drupal Webform Module HTML Injection and Information Disclosure Vulnerabilities
Severity: HIGH
Description:
Drupal is a web-based content manager. Webform is a Drupal module that is used to create questionnaires, contact forms, surveys, and other forms.
The application is prone to these security issues:
1. An HTML-injection vulnerability occurs because the application fails to sufficiently sanitize user-supplied input passed through field labels.To exploit this issue, an attacker must have permission to create webforms.
2. An information-disclosure vulnerability occurs because the application may use token placeholders for a default value in a page cache. When caching is enabled, the attacker can harvest sensitive session data that can aid in further attacks.
The attacker may leverage these issues to obtain potentially sensitive session information, execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, or control how the site is rendered to the user; other attacks are also possible.
Versions prior to Webform 6.x-2.8 and 5.x-2.8 are vulnerable.
Affected Products:
- Drupal Webform
- Drupal Webform Module 5.x-1.10
- Drupal Webform Module 5.x-1.9
- Drupal Webform Module 5.x-2.0-beta2
- Drupal Webform Module 5.x-2.0-beta3
- Drupal Webform Module 5.x-2.7
- Drupal Webform Module 6.x-2.0-beta2
- Drupal Webform Module 6.x-2.0-beta3
- Drupal Webform Module 6.x-2.7
References:
- Drupal: Drupal Homepage
- Drupal: SA-CONTRIB-2009-074- Webform - Multiple vulnerabilities
- Drupal: Webform Project Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
