Details
-
Sub-task
-
Status: Closed
-
High
-
Resolution: Fixed
-
3.04.07
-
None
-
Go green test server
Description
Cause: in Go Green, when the search is performed after giving an invalid path in the URL, the query string is not escaped. (An example of a search that way is: http://www.demo.test.onehippo.com/solar ).
Some of the characters for which this happens: [ ' ( ) "
This might also be a security issue, equivalent to SQL injection.
To reproduce, using Go Green test server:
- Go to: http://www.demo.test.onehippo.com/abcd) (including the closing bracket)
- Check the cms log
For every such request, more than 20kB of log messages are created. The result of a single request is attached. (logs.txt)
This way, a malicious user can fill up the logs quickly (50 requests = 1MB)