drupal_module-loft_data_grids-xml-external-entity--processing.yaml

id: drupal_module-loft_data_grids-xml-external-entity--processing
info:
  name: drupal_module-loft_data_grids-xml-external-entity--processing
  author: Bishopfox
  severity: medium
  description: "This module enables aklump/loft_data_grids to be used as a Drupal module. Excel support was provided by https://packagist.org/packages/phpoffice/phpexcel, which is abandoned and there are known security vulnerabilities: [CVE-2018-19277]: PHPOffice/PhpSpreadsheet#771.  Excel support has since been replaced with the newer https://github.com/PHPOffice/PhpSpreadsheet library. This module provides an API and This vulnerability is not exploitable in the module itself. This vulnerability only exists if custom code or another module uses the API of this module to read a spreadsheet."
  reference:
    - https://www.drupal.org/sa-contrib-2021-043
  metadata:
    security-risk: "Moderately critical 11∕25 AC:Complex/A:Admin/CI:Some/II:Some/E:Proof/TD:Uncommon"
    vulnerability: "xml-external-entity--processing"
    fofa-query: "/sites/all/modules/loft_data_grids/"
    google-query: "inurl:'/sites/all/modules/loft_data_grids/"
    impact: medium
    type: indicator
    created_at: '0001-01-01T00:00:00Z'
  tags: drupal

http:
  - method: GET
    redirects: true
    max-redirects: 3
    path:
      - "{{BaseURL}}/sites/all/modules/loft_data_grids/loft_data_grids.info"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - 'version = "([0-9]+\.x-[0-9]+\.[0-9]+)"'
      - type: status
        status:
          - 200
      - type: word
        words:
          - 'loft_data_grids'
        part: body

    extractors:
      - type: regex
        name: version
        part: body
        group: 1
        regex:
          - 'version = "([0-9]+\.x-[0-9]+\.[0-9]+)"'

      - type: dsl
        dsl:
         - compare_versions(version, '8.x-1.3')
         - compare_versions(version, '8.x-1.1')
         - compare_versions(version, '7.x-2.2')
         - compare_versions(version, '7.x-2.1')