Cross-site Scripting (XSS) - Reflected

2023-08-1517:30:03

5h4s1

www.huntr.dev

arbitrary code execution

browser vulnerability

rest api

get request

payload injection

javascript

proof of concept

bug bounty

0.0005 Low

EPSS

Percentile

17.1%

JSON

Description

Reflected Cross-Site Scripting (XSS) vulnerability allows attackers to execute arbitrary external javascript code in the browser.
In the application there exists a XSS vulnerability that occurs in the api:

 Payload: "&gt;&lt;script&gt;alert(window.location)&lt;/script&gt;

 GET /system/api/restApiViewer: Passing XSS payload to any param leads to XSS vulnerability.
 GET /system/api/graphqlViewer: Passing XSS payload to param `apiKey` leads to XSS vulnerability.

Proof of Concept

https://drive.google.com/file/d/1QS4ayL3Wngxd0Vqf9l8kob9pKomFJV4X/view?usp=share_link

References

owasp.org/www-community/attacks/xss/

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for 69684663-6822-41FF-AA05-AFBDB8F5268F