The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README file containing XSS-able HTML tags. Upon Snyk Advisor importing the package, the XSS would run each time an end user browsed to the package's page on Snyk Advisor.
References
| Link | Resource |
|---|---|
| https://support.snyk.io/hc/en-us/articles/10146704933405 | Vendor Advisory |
| https://weizman.github.io/2023/04/10/snyk-xss/ | Exploit Third Party Advisory |
| https://support.snyk.io/hc/en-us/articles/10146704933405 | Vendor Advisory |
| https://weizman.github.io/2023/04/10/snyk-xss/ | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 07:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.snyk.io/hc/en-us/articles/10146704933405 - Vendor Advisory | |
| References | () https://weizman.github.io/2023/04/10/snyk-xss/ - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
28 Apr 2023, 03:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Snyk
Snyk advisor |
|
| References | (MISC) https://weizman.github.io/2023/04/10/snyk-xss/ - Exploit, Third Party Advisory | |
| References | (MISC) https://support.snyk.io/hc/en-us/articles/10146704933405 - Vendor Advisory | |
| CWE | CWE-79 | |
| CPE | cpe:2.3:a:snyk:advisor:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
20 Apr 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-20 10:15
Updated : 2024-11-21 07:39
NVD link : CVE-2023-1767
Mitre link : CVE-2023-1767
CVE.ORG link : CVE-2023-1767
JSON object : View
Products Affected
snyk
- advisor
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')