Cross Site Scripting in GUnet Open eClass Platform

Executive Summary

CVE-2024-31027 is a stored cross-site scripting (XSS) vulnerability in the Greek Universities Network Open eClass Platform v3.15. It allows attackers to inject malicious scripts into user registration fields like first name, last name, or username. These scripts execute when administrators view or search user lists in the admin panel.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect user registration fields (first name, last name, username) for unusual or malicious input. Check admin panel logs for unexpected script execution when viewing user lists. Use browser developer tools to monitor network requests during registration for suspicious payloads.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to admin session hijacking, privilege escalation, system-wide malware injection, or data exfiltration. Attackers could gain unauthorized access to sensitive data or take control of the system through the injected scripts.

Useful 0 Not Useful 0

Mitigation Strategies

Sanitize and encode user input during registration and storage. Implement strict input validation for first name, last name, and username fields. Ensure output encoding when rendering user data in admin panels to prevent script execution.

Useful 0 Not Useful 0