PT-2024-28054 · Zenuml · Zenuml

Yash-Singh1 · Published 2024-06-26 · Updated 2024-06-27 · CVE-2024-38527

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZenUML versions prior to 3.23.25

Description The comment feature in ZenUML diagram syntax is susceptible to Cross-site Scripting (XSS) due to the lack of sanitization of markdown text before rendering. This allows an attacker to enter a malicious payload for the comment, leading to arbitrary JavaScript execution when rendering user-controlled diagrams. The vulnerability puts existing applications that use ZenUML unsandboxed at risk.

Recommendations For versions prior to 3.23.25, update to version 3.23.25 or later to resolve the issue. As a temporary workaround, consider disabling the comment feature or restricting the use of markdown features in comments to minimize the risk of exploitation. Avoid using unsanitized user input in comments until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

CWE-79

Related Identifiers

CVE-2024-38527

GHSA-Q6XV-JM4V-349H

Affected Products

Zenuml

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38527.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-38527 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q6xv-jm4v-349h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38527 · Security Note
• https://github.com/mermaid-js/zenuml-core/security/advisories/GHSA-q6xv-jm4v-349h · Note
• https://github.com/mermaid-js/zenuml-core · Note
• https://github.com/mermaid-js/zenuml-core/commit/ad7545b33f5f27466cbf357beb65969ca1953e3c · Note