Vulnerabilities > CVE-2018-1000124 - Server-Side Request Forgery (SSRF) vulnerability in I-Librarian I, Librarian

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

i-librarian

CWE-918

NVD

Published: 2018-03-13

Updated: 2018-04-13

Summary

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.php(simplexml_load_string) that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter form_import_textarea.

Vulnerable Configurations

Part	Description	Count
Application	I-Librarian I Librarian I, Librarian 3.0 I Librarian I, Librarian 3.1 I Librarian I, Librarian 3.2 I Librarian I, Librarian 3.2.1 I Librarian I, Librarian 3.3 I Librarian I, Librarian 3.4 I Librarian I, Librarian 3.4.1 I Librarian I, Librarian 3.5 I Librarian I, Librarian 4.0 I Librarian I, Librarian 4.1 I Librarian I, Librarian 4.2 I Librarian I, Librarian 4.3 I Librarian I, Librarian 4.4 I Librarian I, Librarian 4.5 I Librarian I, Librarian 4.6 I Librarian I, Librarian 4.7 I Librarian I, Librarian 4.8	17

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

References

https://github.com/mkucej/i-librarian/issues/116