[Duplicate] Reflected XSS in Chart Widget via connectorUrl Parameter
A reflected XSS vulnerability in the chart widget's connectorUrl parameter allows attackers to execute arbitrary JavaScript, potentially leading to credential phishing attacks on users.
Summary
A reflected cross-site scripting (XSS) vulnerability was identified in the chart widget's handling of the connectorUrl parameter. This flaw allows an attacker to inject and execute arbitrary JavaScript code in the context of the user's browser, potentially leading to credential theft through phishing attacks.
Affected Component
The vulnerability resides in the chart widget's JavaScript configuration script, specifically in the handling of the connectorUrl parameter.
Root Cause
The root cause of the vulnerability is the improper handling of user input in the connectorUrl parameter. The parameter is directly interpolated into a JavaScript string literal without proper sanitization or escaping, allowing for JavaScript injection. The lack of a Content-Security-Policy and X-Frame-Options further exacerbates the issue, enabling the execution of malicious scripts.