CVE-2020-35677
Last modified
CVE-2020-35677 is a medium-severity vulnerability rated 4.8/10 on the CVSS scale. BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to create a new group, resulting in Stored XSS. The caveat here is that an attacker would need administrative privileges in order to create the payload. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
BigProf Online Invoicing System before 4.0 fails to adequately sanitize fields for HTML characters upon an administrator using admin/pageEditGroup.php to create a new group, resulting in Stored XSS. The caveat here is that an attacker would need administrative privileges in order to create the payload. One might think this completely mitigates the privilege-escalation impact as there is only one high-privileged role. However, it was discovered that the endpoint responsible for creating the group lacks CSRF protection.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bigprof | Online Invoicing System | < 4.0 |
References
- https://labs.ingredous.com/2020/07/13/ois-groupedit-xss/Third Party Advisory
- https://labs.ingredous.com/2020/07/13/ois-groupedit-xss/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-35677?
How severe is CVE-2020-35677?
How do I fix CVE-2020-35677?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-35668RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference…7.5
- CVE-2020-35669An issue was discovered in the http package through 0.12.2 f…6.1
- CVE-2020-3567A vulnerability in the management REST API of Cisco Industri…6.5
- CVE-2020-35674BigProf Online Invoicing System before 2.9 suffers from an u…9.8
- CVE-2020-35675BigProf Online Invoicing System before 3.0 offers a function…8.8
- CVE-2020-35676BigProf Online Invoicing System before 3.1 fails to correctl…6.1
- CVE-2020-35678Autobahn|Python before 20.12.3 allows redirect header inject…6.1
- CVE-2020-35679smtpd/table.c in OpenSMTPD before 6.8.0p1 lacks a certain re…7.5
- CVE-2020-3568A vulnerability in the antispam protection mechanisms of Cis…5.8
- CVE-2020-35680smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain c…7.5
- CVE-2020-35681Django Channels 3.x before 3.0.3 allows remote attackers to …7.4
- CVE-2020-35682Zoho ManageEngine ServiceDesk Plus before 11134 allows an Au…8.8
Are you affected by CVE-2020-35677?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST