Stored XSS in Data Preparation Module of AI Platform (CVSS 9.6)

Key Information Summary Vulnerability Description Type: Stored Cross-Site Scripting (XSS) Location: Data Preparation module Trigger Condition: Attackers can execute code in victims' browsers by uploading an SVG file containing malicious JavaScript. Vulnerability Details Application Flaw: The application allows uploading files in the "Data Preparation" feature without sanitizing their content. Attack Vector: When accessing the uploaded file via the provided endpoint, the script executes within the victim’s browser context. Reproduction Steps 1. Navigate to the or project. 2. Go to the Data Preparation section. 3. Upload an SVG file containing . 4. Access the uploaded file via the generated file endpoint. 5. Observe JavaScript execution and view or other injected logic in a pop-up window. Expected Behavior vs. Actual Impact Expected: Uploaded SVG files should be sanitized or SVG uploads should be restricted to prevent JavaScript execution. Actual: Malicious JavaScript executes upon accessing the uploaded file, potentially leading to session hijacking, forced user actions, phishing, or data exfiltration. CVSS Score and Severity Assessment CVSS V3.1 Score: 9.6 (Critical) Classification: Stored XSS Severity: Medium, as attackers can remotely execute JavaScript, but only affecting users within the project scope, without direct impact on backend administration or sensitive operations. Rewards and Response The reporter received $200 in cash, 500 AIX Block tokens, and a share of rewards for submitting a detailed report. Developers acknowledged the vulnerability, thanked the reporter, and encouraged future submissions of high-impact and unique findings.

Goal Reached Thanks to every supporter — we hit 100%!

Stored XSS in Data Preparation Module of AI Platform (CVSS 9.6)

More from this source