Vulnerability · Published Nov 13, 2024 · Assigned by GitHub_M

CVE-2024-49379Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in Umbrel

Medium 5.3

In plain English

A medium-severity cross-site scripting in umbrel from getumbrel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 4.0)5.3Medium

Exploit odds (30 days)1.3%top 29.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Umbrel is a home server OS for self-hosting. The login functionality of Umbrel before version 1.2.2 contains a reflected cross-site scripting (XSS) vulnerability in use-auth.tsx. An attacker can specify a malicious redirect query parameter to trigger the vulnerability. If a JavaScript URL is passed to the redirect parameter the attacker provided JavaScript will be executed after the user entered their password and clicked on login. This vulnerability is fixed in 1.2.2.

Affected products (as reported)

Vendor	Product	Versions
getumbrel	umbrel	< 1.2.2

Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

References

https://securitylab.github.com/advisories/GHSL-2024-164_Umbrel/ x_refsource_CONFIRM
https://github.com/getumbrel/umbrel/commit/b83e3542650880bf1439419d00bf82285a7d2b22 x_refsource_MISC
https://github.com/getumbrel/umbrel/releases/tag/1.2.2 x_refsource_MISC