NextScan 1.1.0 through 1.2.0 Stored XSS via URL Asset Detail View
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| tongcheng-security-teamNextScan |
1.1.0 – 1.2.0→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
NextScan 1.1.0 through 1.2.0 contains a stored cross-site scripting vulnerability in the ns-admin URL asset detail dialog that renders crawled form request bodies (Asset_URL.data) via innerHTML without encoding. Attackers can host crafted forms on crawled sites to store JavaScript that executes when users view asset details, stealing localStorage access tokens to hijack sessions, including administrators.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory vul.yulun.ac.cn
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- report github.com
- web hub.docker.com
- web vul.yulun.ac.cn
- web github.com