8000 XSS vulnerabilities in the theme package · Issue #676 · cezerin/cezerin · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

XSS vulnerabilities in the theme package #676

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
gtsp233 opened this issue Jan 20, 2024 · 0 comments
Open

XSS vulnerabilities in the theme package #676

gtsp233 opened this issue Jan 20, 2024 · 0 comments

Comments

@gtsp233
Copy link
gtsp233 commented Jan 20, 2024

Hi, I've found four Cross-Site Scripting (XSS) vulnerabilities in the theme package.

Vulnerability Details:

  • Severity: High/Critical
  • Description: There's a risk of malicious script execution when the input to components are controlled by an adversory.

Steps to Reproduce:

import React from "react";
import {
  PageContainer,
  CheckoutContainer,
  IndexContainer,
  SharedContainer,
} from "theme";

function App() {
  return (
    <div>
      <PageContainer
        state={{
          productDetails: {
            description: `<img src='' 
          },
        }}
      />
      <CheckoutContainer
        state={{
          pageDetails: {
            description: `<img src='' 
          },
        }}
      />
      pageDetails
    </div>
  );
}

const root = ReactDOM.createRoot(document.getElementById("root"));
root.render(<App />);

Suggested Fix or Mitigation:
Sanitize the HTML before rendering with dangerouslySetInnerHTML. To fix all of the four vulnerabilities, sanitize the HTML at the following locations:
components/checkoutSuccess.js line 117
containers/index.js line 32
components/productDetails/index.js line 21
containers/page.js line 32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@gtsp233
0