Vulnerability Description
A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the attacker can view all data the attacked user can view, as well as perform all actions in the name of the user. If the user is an administrator, the attacker can for example add a new admin user to gain full access to the application.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Davical | Davical | <= 1.1.8 |
| Debian | Debian Linux | 8.0 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/155630/DAViCal-CalDAV-Server-1.1.8-ReflectiExploitThird Party AdvisoryVDB Entry
- https://gitlab.com/davical-project/davical/blob/master/ChangeLogRelease NotesThird Party Advisory
- https://hackdefense.com/publications/cve-2019-18345-davical-caldav-server-vulnerExploitThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/12/msg00016.htmlMailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Dec/30Mailing ListThird Party Advisory
- https://wiki.davical.org/index.php/Main_PageProductVendor Advisory
- https://www.davical.org/ProductVendor Advisory
- https://www.debian.org/security/2019/dsa-4582Third Party Advisory
- http://packetstormsecurity.com/files/155630/DAViCal-CalDAV-Server-1.1.8-ReflectiExploitThird Party AdvisoryVDB Entry
- https://gitlab.com/davical-project/davical/blob/master/ChangeLogRelease NotesThird Party Advisory
- https://hackdefense.com/publications/cve-2019-18345-davical-caldav-server-vulnerExploitThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/12/msg00016.htmlMailing ListThird Party Advisory
- https://seclists.org/bugtraq/2019/Dec/30Mailing ListThird Party Advisory
- https://wiki.davical.org/index.php/Main_PageProductVendor Advisory
- https://www.davical.org/ProductVendor Advisory
FAQ
What is CVE-2019-18345?
CVE-2019-18345 is a vulnerability with a CVSS score of 9.3 (CRITICAL). A reflected XSS issue was discovered in DAViCal through 1.1.8. It echoes the action parameter without encoding. If a user visits an attacker-supplied link, the attacker can view all data the attacked ...
How severe is CVE-2019-18345?
CVE-2019-18345 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-18345?
Check the references section above for vendor advisories and patch information. Affected products include: Davical Davical, Debian Debian Linux.