Skip to content

Commit

Permalink
Merge commit from fork
Browse files Browse the repository at this point in the history
security: Fix XSS in Vulnerability Page
  • Loading branch information
yogeshojha authored Aug 16, 2024
2 parents 7e617c1 + 70b8f29 commit 064bac1
Show file tree
Hide file tree
Showing 4 changed files with 19 additions and 0 deletions.
1 change: 1 addition & 0 deletions .github/SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,7 @@ Thanks to these individuals for reporting Security Issues in reNgine.
### 2024

* [HIGH] [Command Injection](https://github.com/yogeshojha/rengine/security/advisories/GHSA-fx7f-f735-vgh4) in Waf Detector, Reported by [n-thumann](https://github.com/n-thumann)
* [MEDIUM] [Stored XSS](https://github.com/yogeshojha/rengine/security/advisories/GHSA-96q4-fj2m-jqf7) in in Vulnerability Page, Reported by [Touhid M Shaikh](https://github.com/touhidshaikh)

### 2022

Expand Down
6 changes: 6 additions & 0 deletions web/startScan/templates/startScan/detail_scan.html
Original file line number Diff line number Diff line change
Expand Up @@ -1745,6 +1745,12 @@ <h4 class="header-title mb-0"><span id="endpoint_change_count"><span class="spin
},
"targets": 16,
},
{
"render": function ( data, type, row ) {
return htmlEncode(data);
},
"targets": 17,
}
],
"initComplete": function(settings, json) {
api = this.api();
Expand Down
6 changes: 6 additions & 0 deletions web/startScan/templates/startScan/vulnerabilities.html
Original file line number Diff line number Diff line change
Expand Up @@ -234,6 +234,12 @@
},
"targets": 16,
},
{
"render": function ( data, type, row ) {
return htmlEncode(data);
},
"targets": 17,
}
],
"initComplete": function(settings, json) {
api = this.api();
Expand Down
6 changes: 6 additions & 0 deletions web/targetApp/templates/target/summary.html
Original file line number Diff line number Diff line change
Expand Up @@ -1545,6 +1545,12 @@ <h4 class="header-title mb-0"><span id="technologies-count"><span class="spinner
},
"targets": 16,
},
{
"render": function ( data, type, row ) {
return htmlEncode(data);
},
"targets": 17,
}
],
"initComplete": function(settings, json) {
api = this.api();
Expand Down

0 comments on commit 064bac1

Please sign in to comment.