Actions
Bug #16944
closed
JP
JP
Potential XSS in Dynamic DNS widget display of Custom and RFC2136 entries
Bug #16944:
Potential XSS in Dynamic DNS widget display of Custom and RFC2136 entries
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
26.07
Release Notes:
Default
Affected Version:
Affected Architecture:
Description
The Dynamic DNS Dashboard widget prints the host field of Custom entries and the server field of RFC2136 entries without encoding.
Custom entries do not display a host form field, but if the user submits one, it still gets stored and used.
For Custom entries, the payload for host would look like:
<img src=x onerror=alert('XSS')>
For RFC2126 entries, the payload for server would look like:
\"><img src=x onerror=alert('XSS')>
Files
Actions