Critical · published April 20, 2022
🚨 A sneaky markdown issue in wire-webapp can turn innocent messages into a hacker’s playground! 🔥 Think of it like a restaurant where the chef lets anyone swap out the ingredients without checking what’s being added. One bad order could turn a delicious meal into a recipe for disaster, with the attacker gaining full control over your dining experience! An attacker could send a carefully crafted message that, when viewed, executes arbitrary HTML and JavaScript in the context of the victim. This could lead to complete account takeover, leaving sensitive information vulnerable and the user at the mercy of the hacker. Absolutely devastating!
Think of it like a restaurant where the chef lets anyone swap out the ingredients without checking what’s being added. One bad order could turn a delicious meal into a recipe for disaster, with the attacker gaining full control over your dining experience! This vulnerability arises from insufficient escaping in markdown code highlighting within wire-webapp, which allows the injection and execution of arbitrary HTML and JavaScript code when a user views a malicious message.
An attacker could send a carefully crafted message that, when viewed, executes arbitrary HTML and JavaScript in the context of the victim. This could lead to complete account takeover, leaving sensitive information vulnerable and the user at the mercy of the hacker. Absolutely devastating! Update wire-webapp to version 2022-03-30-production.0 if you're using a managed service. For on-premise instances, update to docker tag 2022-03-30-production.0-v0.29.2-0-d144552 or wire-server 2022-03-30 (chart/4.8.0). No known workarounds exist, so these steps are crucial! You've got this! Just follow the steps and you'll lock down your application in no time! 🛡️