[BUG] [XSS] Multiple reflected cross-site scripting vulnarabilites in Graphite composer mygraph parameters(action and graphName).

[0x566164696D]

Product Graphite

Product Version Current master branch

Environment docker graphiteapp/graphite-statsd. Builded from the current master branch.

Vulnerability Reflected cross-site scripting (XSS)

Severity Medium

Description Cross-site scripting is a type of attack on web application clients, in which any code prepared by an attacker can be executed in the client’s browser. Vulnerability to this type of attack occurs due to incorrect filtering of user input data.

Impact As a result of the attack, an attacker can steal a user session, make requests on behalf of the user, and get user credentials, etc.

Expected behavior Sanitize all the parameters passed to the server by the user.

Steps to Reproduce

• Login to the system
• Go to

http://127.0.0.1/composer/mygraph?action="><script>alert(1)</script>&graphName=test
http://127.0.0.1/composer/mygraph?action=delete&graphName="><script>alert(1)</script>