CVE-2024-5478: Cross-site Scripting (XSS) in SAML metadata endpoint in lunary-ai/lunary
First published: Thu Jun 06 2024(Updated: )
A Cross-site Scripting (XSS) vulnerability exists in the SAML metadata endpoint `/auth/saml/${org?.id}/metadata` of lunary-ai/lunary version 1.2.7. The vulnerability arises due to the application's failure to escape or validate the `orgId` parameter supplied by the user before incorporating it into the generated response. Specifically, the endpoint generates XML responses for SAML metadata, where the `orgId` parameter is directly embedded into the XML structure without proper sanitization or validation. This flaw allows an attacker to inject arbitrary JavaScript code into the generated SAML metadata page, leading to potential theft of user cookies or authentication tokens.
Credit: security@huntr.dev security@huntr.dev
| Affected Software | Affected Version | How to fix |
|---|---|---|
| npm/lunary | <=1.2.7 | |
| lunary lunary | =1.2.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5478?
CVE-2024-5478 is classified as a High severity Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2024-5478?
To fix CVE-2024-5478, upgrade to version 1.2.8 or later of the lunary package.
What does CVE-2024-5478 affect?
CVE-2024-5478 affects lunary version 1.2.7 and prior, specifically in the SAML metadata endpoint handling.
Can CVE-2024-5478 be exploited by attackers?
Yes, CVE-2024-5478 can be exploited by attackers to execute malicious scripts in the context of the user's session.
What is the impact of CVE-2024-5478?
The impact of CVE-2024-5478 includes potential theft of sensitive user information and session hijacking.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-rpx8-fg6w-rm6x
- alias/CVE-2024-5478
- agent/software-canonical-lookup
- agent/author
- agent/references
- agent/softwarecombine
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-cve
- package-manager/npm
- vendor/lunary
- canonical/lunary lunary
- version/lunary lunary/1.2.7