CVE-2019-17625
CRITICALRambox 0.6.9 - Stored Cross-Site Scripting and OS Command Injection via Service Name Field
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-17625. PoCs published by Ekultek.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2019-17625, a stored XSS vulnerability in Rambox 0.6.9 that allows remote code execution via crafted service names. The exploit uses a malicious payload injected into a Discord service configuration to execute OS commands via NodeJS.
Description
There is a stored XSS in Rambox 0.6.9 that can lead to code execution. The XSS is in the name field while adding/editing a service. The problem occurs due to incorrect sanitization of the name field when being processed and stored. This allows a user to craft a payload for Node.js and Electron, such as an exec of OS commands within the onerror attribute of an IMG element.
Exploits (1)
This repository contains a functional exploit for CVE-2019-17625, a stored XSS vulnerability in Rambox 0.6.9 that allows remote code execution via crafted service names. The exploit uses a malicious payload injected into a Discord service configuration to execute OS commands via NodeJS.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H