PT-2018-9331 · Risingstack · @Risingstack/Protect

Cianmce · Published 2018-04-18 · Updated 2018-05-21 · CVE-2018-1000160

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RisingStack protect versions 1.2.0 and earlier @risingstack/protect (all versions)

Description The issue concerns a Cross Site Scripting (XSS) vulnerability in the isXss() function, located in lib/rules/xss.js, which can result in dangerous XSS strings being validated as safe. This vulnerability can be exploited via a number of XSS strings, allowing attackers to execute arbitrary JavaScript in a victim's browser.

Recommendations For RisingStack protect versions 1.2.0 and earlier: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For @risingstack/protect (all versions): Consider using an alternative package, as the current package is not actively maintained and will not be patched. As a temporary workaround, consider disabling the isXss() function until a patch is available or an alternative solution is implemented.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-1000160

GHSA-VPCH-RXW3-FGX8

Affected Products

@Risingstack/Protect

References · 10

• 🔥 https://github.com/RisingStack/protect/issues/16 · Exploit
• https://github.com/RisingStack/protect/blob/60b0c91e86686d34e5202419ce9ae7e8dc08edcd/lib/rules/xss.js#L4-L13 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000160 · Security Note
• https://osv.dev/vulnerability/GHSA-vpch-rxw3-fgx8 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000160 · Vendor Advisory
• https://github.com/RisingStack/protect · Note
• https://github.com/advisories/GHSA-vpch-rxw3-fgx8 · Note
• https://snyk.io/vuln/SNYK-JS-RISINGSTACKPROTECT-455402 · Note
• http://embed.plnkr.co/xHbhB29JWWyMUMeHsLrm · Note
• https://npmjs.com/advisories/1116 · Note