CVE-2008-3740

Vulnerability

A cross-site scripting (XSS) vulnerability exists in the output filter of Drupal core versions 5.x before 5.10 and 6.x before 6.4 [1][2]. The bug allows malicious users to inject arbitrary web script or HTML into pages via unspecified vectors, triggered when the output filter processes user-supplied content without proper sanitization [1].

Exploitation

An attacker with the ability to submit content through Drupal's input mechanisms can exploit this flaw remotely [1]. No authentication or special privileges are required; the attacker only needs to craft malicious input that passes through the vulnerable output filter [1][2]. The exact sequence of steps is not detailed in the references, but the attack involves injecting script code into a page that is later rendered to other users.

Impact

Successful exploitation allows the attacker to execute arbitrary web script or HTML in the context of the victim's browser, leading to information disclosure, session hijacking, or other malicious actions [1]. The impact is limited to the browser session of users viewing the affected page, but can enable further attacks against the Drupal site [1].

Mitigation

Drupal has released fixed versions: 5.10 for the 5.x branch and 6.4 for the 6.x branch, both dated August 13, 2008 [1][2]. Users should upgrade to these versions or later. No workarounds are documented; upgrading is the recommended solution.