Stuck on an issue?
Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
XSS in URI / PATH_INFO going undetected
See original GitHub issue_Issue originally created by user dune73 on date 2018-02-23 05:44:01. Link to original issue: https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/1022._
There is a false negative in the way we ignore onXXX events in the URI.
curl "http://localhost/index.html/x%22%3E%3CsvG%20onLoad=prompt(9)%3E"
If the same URI appears in the Referer, it triggers 941101, 941120 and 941160. Adding the URI to be covered by these rules, won’t change a thing, so it’s also an encoding problem.
Issue Analytics
- State:
- Created 3 years ago
- Comments:12
Top Results From Across the Web
XSS in URI / PATH_INFO going undetected · Issue #1022
This is weird, the web server should reply with a 404 due to non existing resource as index.html is a directory and the...
Read more >c# - Request.PathInfo issues and XSS attacks
By appending PathInfo to the URL, an attacker can cause your page to load itself as the stylesheet because ASP.NET resolves Page.aspx/Master.css ...
Read more >Cross Site Scripting Prevention - OWASP Cheat Sheet Series
For XSS attacks to be successful, an attacker needs to insert and execute malicious content in a webpage. Each variable in a web...
Read more >X-XSS-Protection - Preventing Cross-Site Scripting Attacks
Learn how the X-XSS-Protection HTTP response header can help better protect your website's visitors against common cross-site scripting ...
Read more >What is a cross-site scripting vulnerability?
Stored XSS can be extremely dangerous when injected into high-traffic pages that are re-shared by users, as it can remain undetected for a...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
User fgsch commented on date 2019-02-12 16:46:28:
I will submit a PR later today or tomorrow for 941110. I haven’t had a chance to look into the other vectors in detail but I expect FPs at least until https://github.com/client9/libinjection/pull/143 is merged, which seems to have gone awfully silent.
User fgsch commented on date 2019-02-12 11:17:17:
Can we start by adding the path to 941110? Or anyone thinks this will cause many FPs?