Executive Summary

This vulnerability is a stored Cross-Site Scripting (XSS) issue found in Shaarli versions 0.16.1 and earlier. It occurs in the tag filtering functionality where an authenticated user can inject arbitrary JavaScript code into the tags field when creating a bookmark. The malicious script is stored in the database and later executed when users interact with the "Filter by tag" search feature on the homepage. This happens because user input in the tags field is not properly sanitized or escaped before being displayed, allowing the injected script to run in the context of other users.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact users by allowing attackers to execute arbitrary JavaScript code in the context of the affected application. This can lead to theft of sensitive information such as session cookies, unauthorized actions performed on behalf of users, or other malicious activities. Both administrators and privileged users who interact with the "Filter by tag" feature are at risk. The impact includes potential compromise of confidentiality and integrity of user data.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade Shaarli to version 0.16.2 or later, where the stored Cross-Site Scripting (XSS) issue in the tag filtering functionality has been fixed.

Avoid using the "Filter by tag" search feature with untrusted or suspicious tags until the upgrade is applied.

Useful 0 Not Useful 0