CVE-2023-5654
Last modified
CVE-2023-5654 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch(). EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch(). The URL is not validated or sanitised before it is fetched, thus allowing a malicious web page to arbitrarily fetch URL’s via the victim's browser.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| React-Devtools | < 4.28.4 |
References
- https://gist.github.com/CalumHutton/1fb89b64409570a43f89d1fd3274b231Patch, Third Party Advisory
- https://gist.github.com/CalumHutton/1fb89b64409570a43f89d1fd3274b231Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-5654?
How severe is CVE-2023-5654?
How do I fix CVE-2023-5654?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-5646Rejected reason: ** REJECT **DO NOT USE THIS CVE RECORD. Co…
- CVE-2023-5647Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
- CVE-2023-5650An improper privilege management vulnerability in the ZySH o…5.5
- CVE-2023-5651The WP Hotel Booking WordPress plugin before 2.0.8 does not …5.4
- CVE-2023-5652The WP Hotel Booking WordPress plugin before 2.0.8 does not …9.8
- CVE-2023-5653The WassUp Real Time Analytics WordPress plugin through 1.9.…6.1
- CVE-2023-5655Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
- CVE-2023-5656Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. Co…
- CVE-2023-5658The WP MapIt plugin for WordPress is vulnerable to Stored Cr…5.4
- CVE-2023-5659The Interact: Embed A Quiz On Your Site plugin for WordPress…5.4
- CVE-2023-5660The SendPress Newsletters plugin for WordPress is vulnerable…5.4
- CVE-2023-5661The Social Feed plugin for WordPress is vulnerable to Stored…5.4
Are you affected by CVE-2023-5654?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST