Jodit Editor DOM XSS via javascript: URL bypass

Executive Summary

Jodit Editor is a WYSIWYG editor with a built-in file browser and image editor. A vulnerability exists in versions prior to 4.12.31 where the sanitizeHTMLElement method fails to properly filter javascript: URLs. Attackers can bypass filtering by using case variants, control-byte prefixes, or embedded tabs/newlines, allowing script execution when a victim clicks a stored link.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves improper handling of javascript: URLs in Jodit Editor versions prior to 4.12.31. Detection requires checking the installed version of Jodit Editor. If the version is below 4.12.31, the system is vulnerable. No specific network commands are provided in the context.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to execute malicious scripts in your browser when you interact with a compromised link. This could lead to unauthorized actions, data theft, or session hijacking if you are logged into a vulnerable application using Jodit Editor.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to stored cross-site scripting (XSS) attacks, potentially exposing sensitive user data. For GDPR, this may result in unauthorized data access or processing, violating Article 32 (security of processing). For HIPAA, it could compromise protected health information integrity or confidentiality under the Security Rule.

Useful 0 Not Useful 0

Mitigation Strategies

Update Jodit Editor to version 4.12.31 or later to address the vulnerability in the sanitizeHTMLElement method.

Useful 0 Not Useful 0