PT-2024-21652 · Querybook · Querybook

Hakupiku · Published 2024-02-28 · Updated 2024-02-29 · CVE-2024-27103

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Querybook versions prior to 3.31.2

Description The issue arises from the use of dangerouslySetInnerHTML when highlighting search results, which can trigger an XSS payload if the result contains malicious code. Additionally, during "query auto-suggestion", the suggested table names are set with innerHTML, leading to an XSS vulnerability. This occurs because the input to dangerouslySetInnerHTML is not sanitized for the data inside queries.

Recommendations For versions prior to 3.31.2, update to version 3.31.2 to rectify the issue. As a temporary workaround, consider disabling the search result highlighting feature and the "query auto-suggestion" feature until the patch is applied. Restrict access to the dangerouslySetInnerHTML and innerHTML functions to minimize the risk of exploitation. Avoid using these functions with untrusted input until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-27103

GHSA-3HJM-9277-5C88

Affected Products

Querybook

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27103.json · Exploit
• https://github.com/pinterest/querybook/commit/449bdc9e7d679e042c3718b7ed07d2ffa3c46a8f · Patch
• https://github.com/pinterest/querybook/security/advisories/GHSA-3hjm-9277-5c88 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-27103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27103 · Security Note
• https://twitter.com/VulmonFeeds/status/1762924839193485349 · Twitter Post
• https://twitter.com/CVEnew/status/1762898637015691466 · Twitter Post
• https://t.me/cvenotify/72581 · Telegram Post
• https://t.me/cvenotify/72697 · Telegram Post