PT-2024-25013 · Unknown · Static Web Server

Palant · Published 2024-04-30 · Updated 2024-05-01 · CVE-2024-32966

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Static Web Server (SWS) (affected versions not specified)

Description The issue allows JavaScript code execution in the context of the web server's domain when directory listings are enabled for a directory that an untrusted user has upload privileges for. A malicious file name, such as <img src=x onerror=alert(1)>.txt, can be used to exploit this. The web server does not perform escaping of HTML entities on values inserted in the directory listing, making file name and current path potentially malicious. This becomes a stored Cross-site Scripting vulnerability for web servers that allow users to upload files or create directories under a name of their choosing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2024-32966

GHSA-RWFQ-V4HQ-H7FG

Affected Products

Static Web Server

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32966.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-32966 · Security Note
• https://osv.dev/vulnerability/GHSA-rwfq-v4hq-h7fg · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-32966 · Vendor Advisory
• https://github.com/static-web-server/static-web-server · Note
• https://github.com/static-web-server/static-web-server/security/advisories/GHSA-rwfq-v4hq-h7fg · Note
• https://github.com/static-web-server/static-web-server/releases/tag/v2.30.0 · Note
• https://twitter.com/CVEnew/status/1785555217939071487 · Twitter Post
• https://twitter.com/linuxpatch/status/1785566229597421648 · Twitter Post