PT-2021-11557 · Unknown · Xmlhttprequest+1
Rinsuki
·
Published
2021-03-05
·
Updated
2021-05-13
·
CVE-2020-28502
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
xmlhttprequest versions prior to 1.7.0
xmlhttprequest-ssl all versions
Description:
The issue arises when requests are sent synchronously, with
async=False on xhr.open. If malicious user input flows into xhr.send, it could result in arbitrary code being injected and run.Recommendations:
For xmlhttprequest versions prior to 1.7.0, update to version 1.7.0 or later.
For xmlhttprequest-ssl all versions, consider disabling the
xhr.send function until a patch is available, and restrict access to the xhr.open method with async=False to minimize the risk of exploitation.Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Xmlhttprequest
Xmlhttprequest-Ssl