XSS vulnerability in reference

geneontology / amigo

AmiGO is the public interface for the Gene Ontology.

http://amigo.geneontology.org

BSD 3-Clause "New" or "Revised" License

29 stars 17 forks source link

XSS vulnerability in reference #608

Closed kltm closed 3 years ago

kltm commented 3 years ago

It is currently possible to inject disrupting code into the reference url that could be used to create an XSS attack for users on bad links. For example, the following URLs illustrate this, disrupting the variable creation:

[x] http://amigo-exp.geneontology.io/amigo/reference?ref_id=PMID:666666%22%3E%3Csvg/onload=alert(document.domain)%3E

kltm commented 3 years ago

I think I got it.