HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attacker can place attacker-controlled button configuration in the options query-string parameter of space/membership/request-membership-form, lure an authenticated non-member into submitting the legitimate membership request form, and cause the server to return JavaScript containing attacker-controlled code.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
Low
Basic privileges needed
User Interaction
Active
User action required
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 3
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Humhub Humhub
cpe:2.3:a:humhub:humhub:1.18.4:*:windows:*:*:*:*:*
|
— | — |
|
Humhub Humhub
cpe:2.3:a:humhub:humhub:1.18.4:*:macos:*:*:*:*:*
|
— | — |
|
Humhub Humhub
cpe:2.3:a:humhub:humhub:1.18.4:*:linux:*:*:*:*:*
|
— | — |