Stored XSS in Hashgraph Guardian via Branding Configuration

Executive Summary

This vulnerability is a stored cross-site scripting (XSS) issue in Hashgraph Guardian versions through 3.5.0. It allows authenticated users with the STANDARD_REGISTRY role to inject malicious scripts by submitting a specially crafted companyName value via the branding configuration API endpoint.

The vulnerability arises because the branding service assigns this input directly to innerHTML without proper sanitization, enabling attackers to execute arbitrary JavaScript code in the browsers of every authenticated user on every page load.

Useful 0 Not Useful 0

Impact Analysis

An attacker exploiting this vulnerability can execute arbitrary JavaScript in the context of authenticated users' browsers. This can lead to unauthorized actions such as stealing session tokens, performing actions on behalf of users, or delivering malicious payloads.

Since the script runs every time an authenticated user loads any page, the impact can be widespread within an organization using the affected software.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this stored cross-site scripting vulnerability in Hashgraph Guardian through version 3.5.0, you should update the software to a version that includes the fix from commit ba8c566.

Since the vulnerability allows authenticated users with the STANDARD_REGISTRY role to inject malicious scripts via the branding configuration API endpoint, restricting or monitoring access to this API endpoint and the STANDARD_REGISTRY role can help reduce risk until the update is applied.

Useful 0 Not Useful 0