CVE-2021-33570 Cross-site scripting in n/a
Stored XSS in Postbird allows attackers to read local files and steal saved PostgreSQL passwords via malicious database content.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-33570?
CVE-2021-33570 is a medium-severity cross-site scripting vulnerability in n/a, published on 25 May 2021. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Postbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL database table. This can result in reading local files via vectors involving XMLHttpRequest and open of a file:/// URL, or discovering PostgreSQL passwords via vectors involving Window.localStorage and savedConnections.
Weakness: CWE-79
Which versions are affected by CVE-2021-33570?
It affects 1 product.
Products include Postbird Project Postbird.
How do I fix CVE-2021-33570?
No fix has been published for CVE-2021-33570 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2021-33570 being exploited?
There is no known exploitation of CVE-2021-33570 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-38qm-8h84-7h9v.