[Security-news] SA-CONTRIB-2009-096 - Link - Cross Site Scripting

[security-news at drupal.org]

  * Advisory ID: DRUPAL-SA-CONTRIB-2009-096
  * Project: Link (third-party module)
  * Version: 5.x, 6.x
  * Date: 2009-November-4
  * Security risk: Moderately Critical
  * Exploitable from: Remote
  * Vulnerability: Cross Site Scripting

-------- DESCRIPTION  
---------------------------------------------------------

The Link module provides a CCK field which enables links to be added to
content types, that can include a URL, title, and target attribute. When
using the "Separate title and URL" formatter supplied by the module, the link
title field is not sanitized before being displayed, leading to a Cross Site
Scripting (XSS [1]) vulnerability.
-------- VERSIONS AFFECTED  
---------------------------------------------------

  * Link module for Drupal 6.x prior to Link 6.x-2.7 [2]
  * Link module for Drupal 5.x prior to Link 5.x-2.6 [3]

Drupal core is not affected. If you do not use the contributed Link module
[4], there is nothing you need to do.
-------- SOLUTION  
------------------------------------------------------------

Upgrade to the latest version:
  * If you use Link module for Drupal 6.x upgrade to version 6.x-2.7 [5]
  * If you use Link module for Drupal 5.x upgrade to version 5.x-2.6 [6]

-------- REPORTED BY  
---------------------------------------------------------

  * Reported by mr.baileys [7]

-------- FIXED BY  
------------------------------------------------------------

  * Fixed by dropcube [8], Link module co-maintainer, and mr.baileys [9]

-------- CONTACT  
-------------------------------------------------------------

The security team for Drupal can be reached at security at drupal.org or via
the form at http://drupal.org/contact.

[1] http://en.wikipedia.org/wiki/Cross-site_scripting
[2] http://drupal.org/node/620668
[3] http://drupal.org/node/620662
[4] http://drupal.org/project/link
[5] http://drupal.org/node/620668
[6] http://drupal.org/node/620662
[7] http://drupal.org/user/383424
[8] http://drupal.org/user/37031
[9] http://drupal.org/user/383424