Javascript XSS injection in the preview of the email alert template

Advisory ID CVE Number Date discovered Severity Advisory revision
STORM-2024-007 CVE-2024-31946 01/09/2024 low v2

Vulnerability details

A user who has access to the SNS with write access on the email alerts page has the ability to run malicious code in the template preview.

Impacted products

ProductsSeverityDetail
Stormshield Network Security low SNS is impacted

Revisions

Version Date Description
v1 04/10/2024 Initial release
v2 07/15/2024 Update and disclosed


Stormshield Network Security

CVSS v3.1 Overall Score: 3.9      

Analysis

Impacted version

A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript, executed by the template preview.
  • SNS 3.7.0 to 3.7.41
  • SNS 3.10.0 to SNS 3.11.29
  • SNS 4.0 to 4.3.24
  • SNS 4.4.0 to 4.7.4

Workaround solution

Solution

There is no workaround solution.

The following versions fix this vulnerability

  • 3.7.42
  • 3.11.30
  • 4.3.25
  • 4.7.5


Attack Vector Attack Complexity Privileges Required User Interaction Scope Confidentiality Impact Integrity Impact Availability impact
Local Low High Required Unchanged High None None
CVSS Base score: 4.2 CVSS Vector: (AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N)
Exploit Code Maturity Remediation Level Report Confidence
Functional exploit exists Official fix Confirmed
CVSS Temporal score: 3.9 CVSS Vector: (AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C)
Confidentiality Requirement (CR) Integrity Requirement (IR) Availability Requirement (AR)
Medium Low Low
CVSS Environmental score: 3.9 CVSS Vector: (AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C/CR:M/IR:L/AR:L/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X)


Acknowledgements

Yann CAM (ycam) / Security Consultant