| Titolo | Argilla argilla 2.3.0 to 2.8.0 (develop commit 5338519) Cross Site Scripting |
|---|
| Descrizione | A vulnerability was found in argilla 2.3.0 to 2.8.0 (develop commit 5338519) and classified
as high 8.1. Affected is the Sandbox.vue component of the annotation UI. The manipulation of
the argument template (dataset custom-field settings) leads to cross-site scripting
(CWE-79). It is possible to launch the attack remotely; user interaction is required
(the victim opens the crafted dataset in the annotation UI).
Technical Details
- Affected file/function: argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue
(iframe rendered with :srcdoc="template" and no sandbox attribute);
argilla-server/src/argilla_server/api/schemas/v1/fields.py CustomFieldSettings.template
stores the attacker-controlled string verbatim
- Vulnerable parameter: settings.template of a dataset custom field (type "custom"), set
through the regular SDK/REST API by an owner/admin user
- Attack vector: Network (persisted in dataset settings; fires for every user viewing the dataset)
- Privileges required: High (dataset creation requires owner or workspace admin role,
argilla-server dataset_policy.py create()); victims are typically lower-privileged annotators
- Trigger condition: the annotation UI renders the custom field; the srcdoc iframe inherits
the application origin because the sandbox attribute is missing, so the embedded script
executes same-origin in the victim's session (parent document access, localStorage with
auth token and user API key, same-origin API calls as the victim)
Impact
- Confidentiality: High (victim's datasets/records/responses readable; localStorage auth
token and API key accessible; demonstrated: token entry detected, value redacted)
- Integrity: High (same-origin API calls can submit/modify responses and datasets as the victim)
- Availability: None demonstrated
CVSS v3.1
Score: 8.1 (High)
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
|
|---|
| Fonte | ⚠️ https://github.com/argilla-io/argilla/issues/5876 |
|---|
| Utente | Dem00000 (UID 98563) |
|---|
| Sottomissione | 10/10/2026 10:11 (17 giorni fa) |
|---|
| Moderazione | 26/10/2026 15:44 (16 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 426456 [Argilla fino a 2.8.0 Sandbox.vue template cross site scripting] |
|---|
| Punti | 20 |
|---|