CVE-2023-43341

Vulnerability

CVE-2023-43341 is a reflected Cross-Site Scripting (XSS) vulnerability in Evolution CMS version 3.2.3 [1]. The root cause is insufficient sanitization of the uid parameter during the database installation process, allowing an attacker to inject arbitrary JavaScript [3].

Exploitation

An attacker can craft a malicious URL containing a payload such as '"<svg/onload=alert('XSS')> in the uid parameter [3]. When a user follows the link during the installation wizard and proceeds to the next step, the payload executes in the context of the vulnerable page [3]. The attack requires the victim to be in the installation process, but no authentication is needed beyond that.

Impact

Successful exploitation allows the attacker to execute arbitrary JavaScript in the user's browser. This can lead to session hijacking, redirection to malicious sites, or theft of sensitive information exposed during installation [1][3].

Mitigation

As of the publication date, no official patch has been released for Evolution CMS 3.2.3 [2]. Users are advised to restrict access to the installation process to trusted networks only and to avoid clicking untrusted links while performing installation [3].