Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security Vulnerability [Stored -XSS] #132

Closed
ghost opened this issue May 25, 2021 · 1 comment
Closed

Security Vulnerability [Stored -XSS] #132

ghost opened this issue May 25, 2021 · 1 comment

Comments

@ghost
Copy link

ghost commented May 25, 2021 •
edited by ghost

Tridentsec team has found the XSS vulnerability in the Postbird application version - 0.8.4. The vulnerability was very Critical and exploiting the vulnerability can lead to Data Breach.

We were able to inject malicious JavaScript into the application, leading us to two other vulnerabilities, Local File Inclusion(LFI) and PostgreSQL Password Stealing.

Proof-of-Concept Code & detailed vulnerability report could be find here: https://github.com/Tridentsec-io/postbird
@Paxa
Copy link
Owner

Paxa commented Aug 30, 2021

This issue caused by missing HTML escaping, and if database content has html with JS code, it could be executed in app

Issue must be fixed in master and will be included in next released

@Paxa Paxa closed this as completed Aug 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Paxa