Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Stored XSS in Vulnerability Title #71

Closed
GPUkiller opened this issue Sep 23, 2024 · 1 comment
Closed

Stored XSS in Vulnerability Title #71

GPUkiller opened this issue Sep 23, 2024 · 1 comment

Comments

@GPUkiller
Copy link

GPUkiller commented Sep 23, 2024 •
edited
Loading

  1. Add XSS Payload in the vulnerability title using a pentester account for example who can only insert vulnerabilities:
    image
  2. Now when the Report Creator Admin or Reviewer visits the Audit page of the project, the XSS payload will be triggered
    image
    Even removing the vulnerability will not remove the payload as it is on the audit page.
@summitt
Copy link
Contributor

summitt commented Sep 25, 2024

Thanks for reporting. We'll mitigate it.

summitt added a commit that referenced this issue Sep 26, 2024
@summitt
fix XSS #71
3673ce9
summitt added a commit that referenced this issue Sep 26, 2024
@summitt
Updating password hashing (#73)
77a7330 
* adding bcrypt as a password hashing feature

* adding lambook

* mongo ssl option

* mongo ssl option

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.9

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.10

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.11

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.12

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.13

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* mongo ssl option

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.15

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.16

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.17

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.18

* [maven-release-plugin] prepare for next development iteration

* mongo ssl option

* [maven-release-plugin] prepare release 1.3.19

* [maven-release-plugin] prepare for next development iteration

* fix XSS #71
@summitt summitt closed this as completed Sep 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@summitt @GPUkiller