Telos Automated Message Handling System reflected XSS in itemlookup.asp

Vulnerability

This cross-site scripting (XSS) vulnerability resides in the itemlookup.asp page of Telos Automated Message Handling System (AMHS). Improper neutralization of user input allows arbitrary script injection. Affected are versions prior to 4.1.5.5 [1].

Exploitation

A remote attacker can exploit the flaw by crafting a URI that includes malicious JavaScript in parameters passed to itemlookup.asp. No authentication is required; the attacker only needs to trick a user into clicking the crafted link. The script then executes in the context of the victim's AMHS session [1].

Impact

Successful exploitation enables the attacker to inject arbitrary script into an active AMHS session, leading to potential information disclosure (e.g., viewing other users' details) or further client-side attacks within the session [1].

Mitigation

Telos addressed these issues in AMHS version 4.1.5.5. Organizations should contact Telos to obtain the update and apply it. No workarounds are mentioned in the available references [1].