Description
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execute in users' browsers when viewed.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
apconw Aix-DB
Default version status: unaffected
0 to ≤ 1.2.4affectedb568a0f3b18ecead9f7d38bb78017f664d54a1a9unaffected
pkg:github/apconw/Aix-DBReferences
- https://github.com/apconw/Aix-DB/issues/230 ↗
- https://github.com/apconw/Aix-DB/pull/231 ↗
- https://github.com/apconw/Aix-DB/commit/b568a0f3b18ecead9f7d38bb78017f664d54a1a9 ↗
- https://github.com/apconw/Aix-DB/blob/v1.2.4/web/src/components/MarkdownPreview/plugins/markdown.ts#L36 ↗
- https://github.com/apconw/Aix-DB ↗
- https://www.vulncheck.com/advisories/aix-db-through-1.2.4-stored-cross-site-scripting-via-markdown ↗