JR56449: Vulnerability in product listing pages

7.0.0.0-WS-WC70Fep8Developer-IFJR56449
7.0.0.0-WS-WC70Fep8Server-IFJR56449

APAR status

• Closed as program error.

Error description

• The IMG tag can be inserted into the product listing page by
  manipulating the input parameters.
  

Local fix

• Update the
  \Widgets_701\com.ibm.commerce.store.widgets.CatalogEntryList\Cat
  alogEntryList_Data.jspf file:
  
  1. Find the following code block:
  
  <c:set var="categoryIds" value="{top_category:
  '${WCParam.top_category}', parent_category_rn:
  '${WCParam.parent_category_rn}', categoryId:
  '${WCParam.categoryId}'}" scope="request"/>
  
  Replace the code block with the following modified code:
  
  <c:set var="categoryIds" value="{top_category:
  '${fn:escapeXml(WCParam.top_category)}', parent_category_rn:
  '${fn:escapeXml(WCParam.parent_category_rn)}', categoryId:
  '${fn:escapeXml(WCParam.categoryId)}'}" scope="request"/>
  

Problem summary

• USERS AFFECTED:
  WebSphere Commerce Version 7 Feature Pack 8.
  
  PROBLEM ABSTRACT:
  Vulnerability in product listing pages
  
  BUSINESS IMPACT:
  An image tag can be inserted into DOM.
  
  RECOMMENDATION:
  

Problem conclusion

• Updated to escape any XML / HTML characters.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP