CVE-2022-35632 XSS in User Interface

The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting XSS. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35632

CVE-2022-35632 affects Velociraptor GUI: the editor’s suggestion feature exposes the description field of VQL functions, plugins, or artifacts without proper sanitization, enabling cross-site scripting (XSS). This issue was fixed in Velociraptor 0.6.5-2. The CVSS data in the entry indicates a MED...

CVE-2022-35631 Filesystem race on temporary files

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35631

Velociraptor (MacOS/Linux) CVE-2022-35631: a symlink attack could occur by replacing a predictable file name with a symlink to another file, allowing the Velociraptor client to overwrite that file. Root cause: predictable filename used during client-server interactions. Impact is local and authen...

CVE-2022-35630

The CVE-2022-35630 issue affects Velociraptor and is a cross-site scripting (XSS) in generating a collection report, allowing injection of JavaScript into the static HTML. Root cause: insufficient sanitization in the report generation path (as described in the NVD entry). Impact is documented as ...

CVE-2022-35630 Unsafe HTML Injection in Artifact Collection Report

A cross-site scripting XSS issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35629

Velociraptor vulnerability CVE-2022-35629 arises from a bug in client–server message handling, allowing a registered client to send messages that claim to originate from another client ID. The issue was fixed in Velociraptor version 0.6.5-2. Remediation: upgrade to 0.6.5-2 or later to close the i...

CVE-2022-35629 Velociraptor Client ID Spoofing

Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, to send messages to the server claiming to come from another client ID. This issue was resolved in Velociraptor 0.6.5-2...

Velocidex Velociraptor 授权问题漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that uses Velociraptor Query Language VQL queries to collect host-based state information. An authorization issue vulnerability exists in Velocidex Velociraptor versions prior to 0.6.5-2, which stems from an error in the handling of...

PT-2022-4063 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.5-2 Description: The issue is related to incorrect link resolution before accessing a file, which may allow an attacker to overwrite arbitrary files. On MacOS and Linux, it may be possible to perform a symli...

Velocidex Velociraptor 后置链接漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that uses Velociraptor Query Language VQL queries to gather host-based status information. A security vulnerability in Velocidex Velociraptor prior to version 0.6.5-2, which originated on MacOS and Linux, can be exploited to perform a...

Velocidex Velociraptor 跨站脚本漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that uses Velociraptor Query Language VQL queries to collect host-based status information. A security vulnerability exists in Velocidex Velociraptor versions prior to 0.6.5-2, which stems from the editor suggestion feature in the...

PT-2022-22933 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.5-2 Description: A cross-site scripting XSS issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. Recommendations: For versions...

PT-2022-22934 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.5-2 Description: The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to...

Velocidex Velociraptor 跨站脚本漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that collects host-based status information using Velociraptor Query Language VQL queries. A security vulnerability exists in Velocidex Velociraptor version 0.6.5-2 that originates from allowing a user to export a collection report in HTML...

CVE-2022-35632

The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting XSS. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35630

A cross-site scripting XSS issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35629

Due to a bug in the handling of the communication between the client and server, it was possible for one client, already registered with their own client ID, to send messages to the server claiming to come from another client ID. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35631

On MacOS and Linux, it may be possible to perform a symlink attack by replacing this predictable file name with a symlink to another file and have the Velociraptor client overwrite the other file. This issue was resolved in Velociraptor 0.6.5-2...

CVE-2022-35629..35632 Velociraptor Multiple Vulnerabilities (FIXED)

This advisory covers a number of issues identified in Velociraptor and disclosed by a security code review performed by Tim Goddard from CyberCX. We also thank Rhys Jenkins for working with the Velociraptor team to identify and rectify these issues. All of these identified issues have been fixed ...