CVE-2016-0781 Cross-site scripting in Cloud Foundry

What is CVE-2016-0781?

CVE-2016-0781 is a medium-severity cross-site scripting vulnerability in Pivotal Cloud Foundry, published on 25 May 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 to v7 and Pivotal Elastic Runtime 1.6.x versions prior to 1.6.20 are vulnerable to an XSS attack by specifying malicious java script content in either the OAuth scopes (SCIM groups) or SCIM group descriptions.

Weakness: CWE-79

Which versions are affected by CVE-2016-0781?

It affects 5 products.

Products include Cloudfoundry Cloud Foundry Uaa Bosh, Pivotal Software Cloud Foundry, Pivotal Software Cloud Foundry Elastic Runtime, Pivotal Software Cloud Foundry Uaa, Pivotal Software Login-Server.

How do I fix CVE-2016-0781?

No fix has been published for CVE-2016-0781 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2016-0781 being exploited?

There is no known exploitation of CVE-2016-0781 in the wild and no public exploit code.

Other vulnerabilities in Pivotal Cloud Foundry

• CVE-2016-6637 Cloud Foundry vulnerable to Cross-Site Request Forgery Critical 9.6
• CVE-2017-4973 Cloud Foundry UAA Privilege Escalation High 8.8
• CVE-2016-4468 SQL injection in n/a High 8.8
• CVE-2016-6651 Privilege escalation in n/a High 8.8
• CVE-2016-3084 Cloud Foundry UAA reset password vulnerable to brute force attack High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-cfh6-j4mw-8cx7.