JVN#87662835: Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding

AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool “AppGoat” for Web Application contains a DNS rebinding vulnerability.

Impact

If a user accesses a malicious web page, arbitrary code may be executed.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Hands-on Vulnerability Learning Tool “AppGoat” for Web Application V3.0.1 and earlier
  [Added on February 17, 2017]
  Note that V3.0.1 released on February 9, 2017 did not address the vulnerability completely. Therefore, V3.0.2 that contains the fix was released.