CVE-2024-58394— Retool 3.88.0 XSS via /api/imageProxy SVG Proxying
Quick assessment
Affected
Retool Retool
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Retool 在 3.88.0 版本之前存在跨站脚本（XSS）漏洞，允许未认证的攻击者通过将恶意 SVG 文件代理至 接口来执行脚本。攻击者可在 参数中提供由其控制的 SVG 文件，该文件将以 Retool 的源域名返回，且未设置内容安全策略（CSP），从而在受害者的会话中执行 JavaScript 代码。Shadowserver Foundation 于 2024 年 10 月 15 日首次观察到该漏洞的利用证据。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-58394
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Retool 3.88.0 XSS via /api/imageProxy SVG Proxying
Source: CVE Program / CVE List V5
Vulnerability Description
Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy. Attackers can supply an attacker-hosted SVG in the url parameter, which is served from the Retool origin without a Content Security Policy, executing JavaScript in victims' sessions. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-10-15.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2024-58394
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-58394
请登录查看更多情报信息。
Other References for CVE-2024-58394 (3)
IV. Related Vulnerabilities
Same product: Retool
Same vendor: Retool
Same weakness: CWE-79
-
CVE-2026-115246
subhajitkhan online-clinic-management-system patdocmsg.php c -
CVE-2023-54413
WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS -
CVE-2020-37284
Sickbeard build-507 Reflected XSS via testNaming pattern Par -
CVE-2017-20290
Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscrib -
CVE-2017-20288
QCubed 3.1.1 Reflected XSS via installer step_2.php
V. Comments for CVE-2024-58394
No comments yet