CVE-2022-24864

Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the founders@originprotocol.com. If the email recipient is using an email program that is susceptible to XSS, then that email recipient will receive an email that may contain malicious XSS. Regardless if the email recipient’s mail program has vulnerabilities or not, the hacker can at the very least inject malicious HTML that modifies the body content of the email. There are currently no known workarounds.

CVSS v3 5.4 MEDIUM
CVSS v2.0 3.5 LOW

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/OriginProtocol/origin-website/pull/617	Patch Third Party Advisory
https://github.com/OriginProtocol/origin-website/security/advisories/GHSA-v6fc-qwxx-m4h7	Third Party Advisory
https://github.com/github/codeql/pull/7127	Patch Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:originprotocol:origin_website:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-04-20 19:15

Updated : 2022-04-28 16:41

NVD link : CVE-2022-24864

Mitre link : CVE-2022-24864

CVE.ORG link : CVE-2022-24864

JSON object : View

Products Affected

originprotocol

origin_website

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2022-24864", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}, {"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.3}]}, "published": "2022-04-20T19:15:08.037", "references": [{"url": "https://github.com/OriginProtocol/origin-website/pull/617", "tags": ["Patch", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/OriginProtocol/origin-website/security/advisories/GHSA-v6fc-qwxx-m4h7", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/github/codeql/pull/7127", "tags": ["Patch", "Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}, {"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Origin Protocol is a blockchain based project. The Origin Protocol project website allows for malicious users to inject malicious Javascript via a POST request to `/presale/join`. User-controlled data is passed with no sanitization to SendGrid and injected into an email that is delivered to the founders@originprotocol.com. If the email recipient is using an email program that is susceptible to XSS, then that email recipient will receive an email that may contain malicious XSS. Regardless if the email recipient\u2019s mail program has vulnerabilities or not, the hacker can at the very least inject malicious HTML that modifies the body content of the email. There are currently no known workarounds."}, {"lang": "es", "value": "Origin Protocol es un proyecto basado en blockchain. El sitio web del proyecto Origin Protocol permite a usuarios maliciosos inyectar Javascript malicioso por medio de una petici\u00f3n POST a \"/presale/join\". Los datos controlados por el usuario son pasados sin sanear a SendGrid y son inyectados en un correo electr\u00f3nico que es entregado a founders@originprotocol.com. Si el destinatario del correo electr\u00f3nico usa un programa de correo electr\u00f3nico que es susceptible de una vulnerabilidad de tipo XSS, entonces ese destinatario recibir\u00e1 un correo electr\u00f3nico que puede contener una vulnerabilidad de tipo XSS malicioso. Independientemente de si el programa de correo electr\u00f3nico del destinatario presenta vulnerabilidades o no, el hacker puede, como m\u00ednimo, inyectar HTML malicioso que modifique el contenido del cuerpo del correo electr\u00f3nico. Actualmente no son conocidas medidas de mitigaci\u00f3n"}], "lastModified": "2022-04-28T16:41:48.010", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:originprotocol:origin_website:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7371A858-EE6A-4541-9C46-8578F52174D3", "versionEndExcluding": "2022-01-10"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}