drupal_module-context-cross-site-scripting.yaml

id: drupal_module-context-cross-site-scripting
info:
  name: drupal_module-context-cross-site-scripting
  author: Bishopfox
  severity: medium
  description: "This module enables you to manage contextual conditions and reactions for different portions of your site. The module doesnt sufficiently sanitize user output when displayed leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability is mitigated by the fact that an attacker must have the ability to store malicious markup in the site (e.g. permission to create a node with a field that accepts filtered html)."
  reference:
    - https://www.drupal.org/sa-contrib-2019-028
  metadata:
    security-risk: "Moderately critical 14∕25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All"
    vulnerability: "cross-site-scripting"
    fofa-query: "/sites/all/modules/context/"
    google-query: "inurl:'/sites/all/modules/context/"
    impact: medium
    type: indicator
    created_at: '0001-01-01T00:00:00Z'
  tags: drupal

http:
  - method: GET
    redirects: true
    max-redirects: 3
    path:
      - "{{BaseURL}}/sites/all/modules/context/context.info"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - 'version = "([0-9]+\.x-[0-9]+\.[0-9]+)"'
      - type: status
        status:
          - 200
      - type: word
        words:
          - 'context'
        part: body

    extractors:
      - type: regex
        name: version
        part: body
        group: 1
        regex:
          - 'version = "([0-9]+\.x-[0-9]+\.[0-9]+)"'

      - type: dsl
        dsl:
         - compare_versions(version, '7.x-3.9')
         - compare_versions(version, '7.x-3.8')
         - compare_versions(version, '7.x-3.7')
         - compare_versions(version, '7.x-3.6')
         - compare_versions(version, '7.x-3.5')
         - compare_versions(version, '7.x-3.4')
         - compare_versions(version, '7.x-3.3')
         - compare_versions(version, '7.x-3.2')
         - compare_versions(version, '7.x-3.1')
         - compare_versions(version, '7.x-3.0')