Phlex XSS via javascript: Bypass in < 1.10.1 (Ruby framework)
CVE-2024-32463 Published on April 17, 2024
phlex makes Cross-site Scripting (XSS) possible due to improper sanitisation of `href` attributes on `<a>` tags
phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the `javascript:` URL scheme in the `href` attribute of an `<a>` tag could be bypassed with tab `\t` or newline `\n` characters between the characters of the protocol, e.g. `java\tscript:`. This vulnerability is fixed in 1.10.1, 1.9.2, 1.8.3, 1.7.2, 1.6.3, 1.5.3, and 1.4.2. Configuring a Content Security Policy that does not allow `unsafe-inline` would effectively prevent this vulnerability from being exploited.
Vulnerability Analysis
CVE-2024-32463 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity, and no impact on availability.
Weakness Type
What is a XSS Vulnerability?
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CVE-2024-32463 has been classified to as a XSS vulnerability or weakness.
Affected Versions
phlex-ruby phlex:- Version >= 1.10.0, < 1.10.1 is affected.
- Version >= 1.9.0, < 1.9.2 is affected.
- Version >= 1.8.0, < 1.8.3 is affected.
- Version >= 1.7.0, < 1.7.2 is affected.
- Version >= 1.6.0, < 1.6.3 is affected.
- Version >= 1.5.0, < 1.5.3 is affected.
- Version >= 1.4.0, < 1.4.2 is affected.
- Version 1.0.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.