CVE-2023-48226
Assigner: GitHub_M
Published: 2023-11-21T19:37:57.103Z
State: PUBLISHED
title: OpenReplay HTML Injection vulnerability
problemTypes: descriptions: cweId: CWE-20
description: CWE-20: Improper Input Validation
type: CWE
descriptions: cweId: CWE-94
description: CWE-94: Improper Control of Generation of Code ('Code Injection')
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
affected: vendor: openreplay
product: openreplay
versions: version: = 1.14.0
status: affected
descriptions: value: OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Settings (for registration looks like validation is correct), a bad actor can send emails with HTML injected code to the victims. Bad actors can use this to phishing actions for example. Email is really send from OpenReplay, but bad actors can add there HTML code injected (content spoofing). Please notice that during Registration steps for FullName looks like is validated correct - can not type there, but using this kind of bypass/workaround - bad actors can achieve own goal. As of time of publication, no known fixes or workarounds are available.
source: advisory: GHSA-xpfv-454c-3fj4
discovery: UNKNOWN