PT-2024-30543 · Rengine · Rengine

Touhidshaikh · Published 2024-08-16 · Updated 2024-09-11 · CVE-2024-43381

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions reNgine versions 2.1.2 and prior

Description The issue occurs when scanning a domain, and if the target domain's DNS record contains an XSS payload, it leads to the execution of malicious scripts in the reNgine's dashboard view when any user views the scan results. The XSS payload is directly fetched from the DNS record of the remote target domain. Consequently, an attacker can execute the attack without requiring any additional input from the target or the reNgine user.

Recommendations For versions 2.1.2 and prior, update to version 2.1.3 or later, which is expected to include a patch for this issue. As a temporary workaround, consider restricting access to the dashboard view or disabling the scanning feature for domains with potentially malicious DNS records until the patch is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-87

CWE-79

Related Identifiers

CVE-2024-43381

GHSA-96Q4-FJ2M-JQF7

Affected Products

Rengine

References · 9

• 🔥 https://github.com/yogeshojha/rengine/security/advisories/GHSA-96q4-fj2m-jqf7 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43381.json · Exploit
• https://github.com/yogeshojha/rengine/commit/064bac1c7c4d2b90745bf225c92e74d83edb7a4d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-43381 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43381 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1824495181673922740 · Twitter Post
• https://t.me/cvenotify/94150 · Telegram Post
• https://t.me/cvedetector/3348 · Telegram Post
• https://twitter.com/CVEnew/status/1824458915578290495 · Twitter Post