Lemmy Security Vulnerability: XSS In the Wild

3 years ago by henfredemars to c/infosecpub

Be careful what posts you click until this is patched.

EDIT: Clarify, this server I expect is also vulnerable, hence the choice of community.

br3ad 4 points 3 years ago

Looks like there are other potential vulnerabilities which makes this issue worse. Possibly CSRF? https://github.com/LemmyNet/lemmy/issues/3505

save

path: 0 880192, hotness: undefined, score: 4, children: 0

21trillionsats 4 points 3 years ago

Hits a 404 now on the link (sh.itjust.works link above), does anyone have a TLDR?

save

path: 0 877569, hotness: undefined, score: 4, children: 1

henfredemars 8 points 3 years ago

Deleting the post might have been damage control because the disclosure was not responsible. Details are in the project GitHub, but basically it's possible to trick Lemmy into serving injected JavaScript by making a post with a crafted URL.

This could allow a user to compromise the accounts of other users if you can get them to click on your post.

save

path: 0 877569 877943, hotness: undefined, score: 8, children: 0

udunadan 1 point 3 years ago

save

path: 0 928166, hotness: undefined, score: 1, children: 0

udunadan 1 point 3 years ago

Thanks for notifying us!

save

path: 0 949452, hotness: undefined, score: 1, children: 0

infosecpub

@infosec.pub

go to feed...

infosecpub

@infosec.pub

go to feed...