DRUPAL-CONTRIB-2021-042 Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field.
Insufficient input sanitization in Drupal Linkit allows authenticated users with entity bundle permissions to inject malicious scripts, potentially leading to code execution or account takeover.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is DRUPAL-CONTRIB-2021-042?
DRUPAL-CONTRIB-2021-042 is a cross-site scripting vulnerability in drupal/linkit, published on 29 Sep 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Linkit provides an easy interface for internal and external linking with WYSIWYG editors by using an autocomplete field.
It does not sufficiently sanitize user input.
This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create or edit an entity bundle.
Which versions are affected by DRUPAL-CONTRIB-2021-042?
Linux distribution packages (1)
drupal/linkit Packagist:https://packages.drupal.org/8 | All versions | 4.4.0 |
How do I fix DRUPAL-CONTRIB-2021-042?
Upgrade to a fixed version.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is DRUPAL-CONTRIB-2021-042 being exploited?
There is no known exploitation of DRUPAL-CONTRIB-2021-042 in the wild and no public exploit code.