CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer,
allowing attacks by low-privileged users against higher-privileged users.This
instance of stored cross-site scripting (XSS) vulnerability could
allow any users with administrator rights to inject malicious scripts
to compromise any users that visit the login page.
ENROLL TODAY IN THE DevOps Fundamentals: Implementing Continuous Delivery SELF PACED COURSE! $199
Wen Bin Kong (@kongwenbin) & @ryantzj
[CVSSv3 Score] 3.8
[Affected Product Code Base] Canopy – 3.0.0-3.0.6
If a low privileged user were to enter a Cross-Site Scripting payload
into the Login Page Disclaimer, then when a user with higher
privileges browse the login page, the malicious content would be
executed within the latter’s user context. The malicious payload could
also be configured to perform any application action available to the
ENROLL IN OUR 95% STUDENT SATISFACTION COURSE, LFD401 – DEVELOPING APPLICATIONS FOR LINUX, AND GET A FREE DELL CHROMEBOOK 11!