DOM text reinterpreted as HTML in static.js on line 543

certtools / intelmq-manager

IntelMQ Manager is a graphical interface to manage configurations for IntelMQ framework.

https://docs.intelmq.org/latest/user/manager/

102 stars 56 forks source link

DOM text reinterpreted as HTML in static.js on line 543 #275

Closed ghost closed 3 years ago

ghost commented 3 years ago

GitHub's CodeQL reports:

DOM text is reinterpreted as HTML without escaping meta-characters.

Extracting text from a DOM node and interpreting it as HTML can lead to a cross-site scripting vulnerability.

for

https://github.com/certtools/intelmq-manager/blob/3c9c6f53f556a47c60e40cd656b524731cde4e7f/intelmq_manager/static/js/static.js#L453-L453

Haven't validated it.