CVE-2023-53925
BaseFortify
Publication date: 2025-12-17
Last updated on: 2025-12-18
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ulicms | ulicms | 2023.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability be detected on my network or system? Can you suggest some commands?
You can detect this vulnerability by checking for uploaded SVG files containing embedded JavaScript in the file management interface of UliCMS 2023.1. Specifically, look for SVG files with <script> tags inside them. One approach is to list SVG files in the upload directory and inspect their contents for script tags. For example, on the server, you can run commands like: 1. Find SVG files: `find /path/to/ulicms/dist/content/ -name '*.svg'` 2. Search for script tags inside SVG files: `grep -l '<script' /path/to/ulicms/dist/content/*.svg` This will list SVG files that contain embedded scripts, indicating potential exploitation. Additionally, monitoring HTTP POST requests to `/dist/admin/fm/upload.php` with content type `image/svg+xml` can help detect malicious uploads. [2]
Can you explain this vulnerability to me?
This vulnerability in UliCMS 2023.1 is a stored cross-site scripting (XSS) issue that allows attackers to upload malicious SVG files containing embedded JavaScript. When other users view these crafted SVG files through the file management interface, the embedded scripts execute, potentially compromising their security.
How can this vulnerability impact me? :
The vulnerability can lead to arbitrary script execution in the context of other users viewing the malicious SVG files. This can result in unauthorized actions, data theft, session hijacking, or other malicious activities affecting users of the system.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include: 1. Restrict or disable SVG file uploads via the file management interface to prevent attackers from uploading malicious SVG files. 2. Implement proper input validation and sanitization to disallow embedded JavaScript within SVG files before accepting uploads. 3. Remove any existing SVG files that contain embedded scripts from the server. 4. Apply access controls to limit privileges of users who can upload files. 5. Monitor and audit file uploads for suspicious activity. 6. If possible, update or patch UliCMS to a version where this vulnerability is fixed. [1, 2]