Lucene search
Nav-prak9AF1C35E-3F74-4C93-A241-E8BE01335EC7HistoryJan 31, 2022 - 9:45 a.m.
Cross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console
2022-01-3109:45:28
nav-prak
www.huntr.dev
4
0.001 Low
EPSS
Percentile
30.0%
Description
Beanstalk Console is vulnerable to reflected Cross-Site Scripting via the server parameter.
Steps to reproduce
-
Setup the Beanstalk console locally.
-
Go to
https://localhost/public/?and add a random server. -
Visit
https://localhost/public/?server=%3Cimg%20src=x%20onerror=alert(document.domain)%3E -
You can see that an alert pops up with the domain name confirming the reflected XSS
Related
prion
prion
Cross site scripting
2022-02-05 16:15:00
cvelist
cvelist
osv
osv
Cross-site Scripting in Beanstalk console
2022-02-06 00:00:54
CVE-2022-0501
2022-02-05 16:15:07
github
github
Cross-site Scripting in Beanstalk console
2022-02-06 00:00:54
cve
cve
CVE-2022-0501
2022-02-05 16:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-02-07 13:50:09
nvd
nvd
CVE-2022-0501
2022-02-05 16:15:07