Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:48113
HistoryJul 18, 2024 - 6:15 a.m.

Template Injection

2024-07-1806:15:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
template injection
requarks/wiki
javascript
html
vulnerability
user inputs
content section

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

AI Score

7

Confidence

Low

github.com/requarks/wiki is vulnerable to Template injection. The vulnerability is due to improper sanitization of user inputs, allowing attackers to inject malicious JavaScript into the content section of pages. Attackers can exploit this by inserting an invalid HTML tag with a template injection payload, which executes once a victim loads the compromised page.

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

AI Score

7

Confidence

Low

Related for VERACODE:48113