GitHub Advisoryadvisory · Packagist

GHSA-ggwq-xc72-33r3 LGSL has a reflected XSS at /lgsl_files/lgsl_list.php

MEDIUM Published 2024-12-30 Modified 2024-12-30 Official page ↗
Aliases
CVE-2024-56517
Ecosystem
Packagist
Packages
tltneon/lgsl
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Weaknesses
CWE-79
Reviewed
2024-12-30

Affected packages

• Packagist tltneon/lgsl: <= 6.2.1 (no fix yet)

Description

Reflected XSS at /lgsl_files/lgsl_list.php Description: Vulnerability: A reflected XSS vulnerability exists in the `Referer` HTTP header of LGSL v6.2.1. The vulnerability allows attackers to inject arbitrary JavaScript code, which is reflected in the HTML response without proper sanitization. When crafted malicious input is provided in the `Referer` header, it is echoed back into an HTML attribute in the application’s response. The vulnerability is present at Line 20-24 ```php $uri = $_SERVER['REQUEST_URI']; if ($lgsl_config['preloader']) { $uri = $_SERVER['HTTP_REFERER']; } ``` Proof of Concept: 1. Capture a request to the path `/lgsl_files/lgsl_list.php`. 2. Inject the following payload into the Referer header: `test'>alert(1)<`. 3. Send the request. 4. The XSS payload is triggered when reloading. Impact: Execution of Malicious Code

Related

Alias · CVE (1)

  • CVE-2024-56517 LGSL (Live Game Server List) provides online status lists for online video games. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References