| शीर्षक | volotat Anagnorisis 0.4.0 Cross Site Scripting |
|---|
| विवरण | A stored DOM-based cross-site scripting vulnerability exists in volotat Anagnorisis 0.4.0. The music library returns filesystem-derived media paths to the browser. PlaylistManager.js derives a base_name from each path, interpolates both file_path and base_name into an HTML string, and inserts the result with jQuery html().
A crafted media filename is therefore parsed as markup when the music playlist is rendered. A loopback-only proof of concept loaded the exact PlaylistManager.js and bundled jQuery from commit acce76065cd4cecf6eaed5bee8691e95c85964d4. In a real Microsoft Edge browser, a synthetic filename containing an img element with an onerror marker created a real DOM element and changed the marker to CONFIRMED. A benign filename negative control returned SAFE_CONTROL_PASSED. After replacing HTML concatenation with DOM construction and text assignment in a local proposal, the same malicious filename returned NOT_TRIGGERED while the benign control continued to pass.
Successful exploitation requires a crafted filename to be present in a media directory scanned by Anagnorisis and requires a user to view the affected interface. No remote upload endpoint was identified, so the report does not claim unauthenticated remote placement of the file. |
|---|
| स्रोत | ⚠️ https://note-hxlab.wetolink.com/share/qA4ZLotZKWmj |
|---|
| उपयोगकर्ता | hiro (UID 93548) |
|---|
| सबमिशन | 29/07/2026 02:30 AM (2 महीनों पहले) |
|---|
| संयम | 24/09/2026 12:12 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 409323 [volotat Anagnorisis तक 0.4.11 Media Filename PlaylistManager.js html file_path क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|