| 제목 | stilleshan ServerStatus ＜＝2.0.0 Stored XSS Vulnerability |
|---|
| 설명 | The core issue stems from the server-side code ( server/src/main.cpp ), which fails to properly validate or JSON-escape the custom field reported by clients before writing it directly into the stats.json file. When administrators access the monitoring dashboard, the frontend code ( web/js/serverstatus.js ) renders this field using innerHTML , automatically executing any malicious scripts injected by an attacker.
An attacker only needs valid credentials for a managed node (often relying on weak default passwords like "password") to send an update packet containing a malicious payload (e.g., <img onerror=...> ) via TCP port 35601. Once triggered, this allows the attacker to steal administrator session cookies, forge administrative operations, or further compromise the internal network. The report recommends mitigating this risk by implementing proper JSON escaping on the server side, replacing innerHTML with textContent or DOMPurify sanitization on the frontend, and changing default weak passwords. |
|---|
| 원천 | ⚠️ https://github.com/BlkSword/POC/blob/main/ServerStatus%20Stored%20.pdf |
|---|
| 사용자 | XiaoHei (UID 92738) |
|---|
| 제출 | 2026. 07. 19. AM 02:08 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 09. 12. AM 10:35 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 403090 [stilleshan ServerStatus 1.0/2.0 Stats Generation server/src/main.cpp custom 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 20 |
|---|