| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| github.com/gotify/server | < 2.2.2mọi phiên bản | 2.2.2 |
| github.com/gotify/server/v2 | < 2.2.2 | 2.2.2 |
| server | < 2.2.2 | 2.2.2 |
The XSS vulnerability allows authenticated users to upload .html files. With that, an attacker could execute client side scripts if another user opened a link, such as:
https://push.example.org/image/[alphanumeric string].html
An attacker could potentially take over the account of the user that clicked the link. Keep in mind, the Gotify UI won't natively expose such a malicious link, so an attacker has to get the user to open the malicious link in a context outside of Gotify.
The vulnerability has been fixed in version 2.2.2.
You can block access to non image files via a reverse proxy in the ./image directory.
https://github.com/gotify/server/pull/534 https://github.com/gotify/server/pull/535
Thanks to rickshang (aka 无在无不在) for discovering and reporting this bug.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí