Stored XSS in SVG Upload via Media Manager in TastyIgniter

Executive Summary

This is a stored Cross-Site Scripting (XSS) vulnerability in TastyIgniter v4.3.0's Media Manager. It allows an authenticated low-privilege user to upload a malicious SVG file containing JavaScript code due to insufficient validation and sanitization. When an administrator views the file, the JavaScript executes in their browser context.

Useful 0 Not Useful 0

Detection Guidance

Check for unauthorized SVG files in the Media Manager upload directory. Inspect server logs for unusual file uploads or administrator access patterns. Look for JavaScript code within SVG files using text editors or grep commands like 'grep -r "<script>" /path/to/uploads/'.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain full control of the administrative account by chaining this XSS with a CSRF attack. This allows unauthorized actions like modifying credentials. The impact includes potential data breaches, system compromise, and loss of administrative control.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules. Non-compliance may result in legal penalties, reputational damage, and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Update TastyIgniter to the latest version to patch the vulnerability. Disable SVG uploads if not required. Implement strict file validation to block SVG files containing JavaScript. Monitor administrator sessions for suspicious activity.

Useful 0 Not Useful 0