Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug]: Potential stored XSS #89

Open
1 of 5 tasks
artemy-ccrsky opened this issue Feb 8, 2023 · 0 comments
Open
1 of 5 tasks

[Bug]: Potential stored XSS #89

artemy-ccrsky opened this issue Feb 8, 2023 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@artemy-ccrsky
Copy link

artemy-ccrsky commented Feb 8, 2023

Describe the bug

Creating/editing module we can edit main.vue, so it leads to stored XSS and also potential impact for interact with WebSocket using valid origin.
Potential impact: Low privilege user affect on high privilege
image_2023-01-27_03-57-55

Steps to Reproduce

  1. Create/edit module
  2. Edit main.vue and add for example: alert("xss") in script block
  3. Open module and browser will render this main.vue
  4. Get XSS alert, or interact with WebSocket using Cross-site Websocket Hijacking bug

Place where not implemented origin check => CSWSH
Exploiting XSS we can interact with WS-server tusing valid origin, so better use CSRF-token to prevent this situations

Screenshots, screen recording, code snippet

Get XSS alert
image_2023-01-27_03-57-55

Environment information

module version: 1.0.1

Which agent binary used?

  • darwin-amd64
  • linux-386
  • linux-amd64
  • windows-386
  • windows-amd64
@artemy-ccrsky artemy-ccrsky added the bug Something isn't working label Feb 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants