Fantomas42 Django Blog Zinnia Protected Entry Password Handler Cleartext Storage Vulnerability

A vulnerability exists in Fantomas42 django-blog-zinnia versions through 0.20 within the Protected Entry Password Handler component. The issue arises in the file zinnia/views/mixins/entry_protection.py

Impact

This vulnerability leads to the cleartext storage of protected entry passwords in session data, which can be accessed if the session storage is exposed or if client-side sessions are readable.

Reproduction

To reproduce this vulnerability, configure a protected entry with a password. After unlocking the entry by submitting the correct password, inspect the session data for that visitor. The submitted password will be stored in plaintext within the session data.

Remediation

It is recommended to modify the password handling process to store a scoped authorization marker or a keyed digest instead of the raw password. This marker should be specific to the entry ID and invalidated when the entry password changes.