CVE-2022-2029: DOM XSS in kromitgmbh/titra
CVE ID: CVE-2022-2029
Date: June 9, 2022
Severity: Medium (CVSS 3.1: 5.4)
CWE: CWE-79 — Improper Neutralization of Input During Web Page Generation
Affected: kromitgmbh/titra prior to 0.77.0
Fixed in: 0.77.0
🔍 Overview
A DOM-based cross-site scripting (XSS) vulnerability exists in GitHub repository kromitgmbh/titra prior to version 0.77.0. Unlike reflected or stored XSS, DOM XSS executes entirely in the client side when untrusted data is read from a source (e.g., window.location, document.URL) and passed to a sink (e.g., eval, innerHTML, document.write) without proper sanitization.
CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector: Network, low complexity, low privileges, user interaction required, changed scope.
🎯 Impact
An attacker crafts a malicious URL and tricks a victim into visiting it. When the page loads, the injected payload executes in the victim’s browser, potentially leading to:
- Session hijacking
- Credential theft
- Unauthorized actions within the application
🛡️ Mitigation
Upgrade to titra 0.77.0 or later. Avoid passing untrusted data directly to DOM sinks. Use textContent instead of innerHTML, and sanitize or validate data read from URL sources before use.