GitHub Advisoryadvisory · npm
GHSA-49rv-g7w5-m8xx Cross-Site Scripting in @novnc/novnc
MEDIUM
Official page ↗
- Aliases
- CVE-2017-18635
- Ecosystem
- npm
- Packages
- @novnc/novnc
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
- Reviewed
- 2020-08-28
Affected packages
• npm @novnc/novnc: < 0.6.2 → fixed in 0.6.2
Description
Versions of `@novnc/novnc` prior to 0.6.2 are vulnerable to Cross-Site Scripting (XSS). The package fails to validate input from the remote VNC server such as the VNC server name. This allows an attacker in control of the remote server to execute arbitrary JavaScript in the noVNC web page. It affects any users of `include/ui.js` and users of `vnc_auto.html` and `vnc.html`.
Recommendation
Upgrade to version 0.6.2 or later.
Related
Alias · CVE (1)
- CVE-2017-18635 An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web… vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-18635 advisory
- https://github.com/novnc/noVNC/issues/748 web
- https://github.com/novnc/noVNC/commit/6048299a138e078aed210f163111698c8c526a13#diff-286f7dc7b881e942e97cd50c10898f03L534 web
- https://access.redhat.com/errata/RHSA-2020:0754 web
- https://bugs.launchpad.net/horizon/+bug/1656435 web
- https://github.com/ShielderSec/cve-2017-18635 web
- https://github.com/novnc/noVNC package
- https://github.com/novnc/noVNC/releases/tag/v0.6.2 web
- https://lists.debian.org/debian-lts-announce/2019/10/msg00004.html web
- https://lists.debian.org/debian-lts-announce/2021/12/msg00024.html web
- https://snyk.io/vuln/SNYK-JS-NOVNCNOVNC-469136 web
- https://usn.ubuntu.com/4522-1 web
- https://www.npmjs.com/advisories/1204 web
- https://www.shielder.it/blog/exploiting-an-old-novnc-xss-cve-2017-18635-in-openstack web