Improper Encoding or Escaping of OutputAffected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the getCommand process. An attacker can execute arbitrary operating system commands by supplying specially crafted values to the IN_FILE_ENDING or OUT_FILE_ENDING configuration keys, which are concatenated into shell command arguments without validation or escaping. This allows the injection of shell metacharacters that are interpreted by the shell, leading to full compromise of confidentiality, integrity, and availability of the system. This is only exploitable if the attacker has the ability to modify configuration files or set configuration keys.
How to fix Improper Encoding or Escaping of Output? Upgrade gov.nsa.emissary:emissary to version 8.43.0 or higher.
| |
Cross-site Scripting (XSS)Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the rendering of Mustache navigation templates when user-controlled values are interpolated into the href attribute without proper URL scheme validation. An attacker can execute arbitrary JavaScript in the context of another authenticated user's browser by configuring a malicious navItems link value containing a javascript: URI and convincing the victim to click the crafted navigation link. This is only exploitable if the attacker has administrative access to modify the navigation configuration and the victim interacts with the malicious link.
How to fix Cross-site Scripting (XSS)? Upgrade gov.nsa.emissary:emissary to version 8.39.0 or higher.
| |
Directory TraversalAffected versions of this package are vulnerable to Directory Traversal via the validate function in the /api/configuration/{name} configuration API endpoint. An attacker can gain unauthorized read access to sensitive configuration files outside the intended directory by submitting specially crafted configuration names using URL-encoded, double-encoded, or Unicode-normalized path traversal sequences.
How to fix Directory Traversal? Upgrade gov.nsa.emissary:emissary to version 8.39.0 or higher.
| |
Command InjectionAffected versions of this package are vulnerable to Command Injection via the Executrix utility when configuration-derived values, such as PLACE_NAME, are concatenated into shell commands without sufficient sanitization. An attacker can achieve arbitrary command execution by supplying specially crafted configuration values containing shell metacharacters.
How to fix Command Injection? Upgrade gov.nsa.emissary:emissary to version 8.39.0 or higher.
| |
