Osmedeus Web Server Vulnerable to Stored XSS, Leading to RCE
Date: 2024-11
Affected: go/github.com/j3ssie/osmedeus
Attack vector: xss
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2024-51735
CWE: CWE-78
CWE-79

### Summary XSS occurs on the Osmedues web server when viewing results from the workflow, allowing commands to be executed on the server. ### Details When using a workflow that contains the summary module, it generates reports in HTML and Markdown formats. The default report is based on the `general-template.md` template. ``` <p align="center"> <a href="https://www.osmedeus.org"><img alt="Osmedeus" src="https://raw.githubusercontent.com/osmedeus/assets/main/logo-transparent.png" height="140" /></a> <br /> <br /> <strong>Execute Summary Generated by Osmedeus {{Version}} at <em>{{CurrentDay}}</em></strong> <p align="center"> <a href="https://docs.osmedeus.org/"><img src="https://img.shields.io/badge/Documentation-0078D4?style=for-the-badge&logo=GitBook&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://docs.osmedeus.org/donation/"><img src="https://img.shields.io/badge/Donation-0078D4?style=for-the-badge&logo=GitHub-Sponsors&logoColor=39ff14&labelColor=black&color=black"></a> <a href="https://twitter.com/OsmedeusEngine"><img src="https://img.shields.io/badge/%40OsmedeusEngine-0078D4?style=for-the-badge&logo=Twitter&logoColor=39ff14&labelColor=black&color=black"></a> </p> </p> ## Scan Information <scanInfo /> *** ## 🚀 Subdomains <content src="{{Output}}/subdomain/final-{{Workspace}}.txt" shorten=true /> *** ## 🌐 HTTP Fingerprint <content src="{{Output}}/fingerprint/beautify-{{Workspace}}-http.txt" /> *** ## 🐞 Vulnerability ### L


Mitigations:

Architectural layers (MAESTRO):