medium
CVE-2026-82881
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execute in users' browsers when viewed.
امتیاز CVSS
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
تحلیلِ بردارِ CVSS
- CWE
- CWE-79
- تاریخ انتشار
- ۹ شهریور ۱۴۰۵
منابع
- https://github.com/apconw/Aix-DB
- https://github.com/apconw/Aix-DB/blob/v1.2.4/web/src/components/MarkdownPreview/plugins/markdown.ts#L36
- https://github.com/apconw/Aix-DB/commit/b568a0f3b18ecead9f7d38bb78017f664d54a1a9
- https://github.com/apconw/Aix-DB/issues/230
- https://github.com/apconw/Aix-DB/pull/231
- https://www.vulncheck.com/advisories/aix-db-through-1.2.4-stored-cross-site-scripting-via-markdown