Openstatus
Monthly
Server-side request forgery in OpenStatus's status-page proxy allows remote attackers to manipulate custom domain resolution, causing the application server to issue forged HTTP requests to unintended internal or external targets. The vulnerable code path in `resolve-custom-domain-rewrite.ts` used attacker-influenced hostname data during URL rewriting without validating that the resolved target corresponded to a legitimate page slug. The patch (commit 86f370c) introduces `applyPageSlugPrefix` to normalize custom domain prefixes to their corresponding page slugs before any internal URL composition occurs, closing the forgery path. No public exploit has been identified at time of analysis, and exploitation requires passive user interaction per the CVSS 4.0 vector.
Reflected cross-site scripting (XSS) in openstatusHQ openstatus allows unauthenticated remote attackers to inject malicious scripts via the callbackURL parameter in the Onboarding Endpoint component. The vulnerability affects the onboarding client functionality and requires user interaction to exploit. Vendor has released a patched version (commit 43d9b2b9ef8ae1a98f9bdc8a9f86d6a3dfaa2dfb), and no public exploit code is currently identified.
Server-side request forgery in OpenStatus's status-page proxy allows remote attackers to manipulate custom domain resolution, causing the application server to issue forged HTTP requests to unintended internal or external targets. The vulnerable code path in `resolve-custom-domain-rewrite.ts` used attacker-influenced hostname data during URL rewriting without validating that the resolved target corresponded to a legitimate page slug. The patch (commit 86f370c) introduces `applyPageSlugPrefix` to normalize custom domain prefixes to their corresponding page slugs before any internal URL composition occurs, closing the forgery path. No public exploit has been identified at time of analysis, and exploitation requires passive user interaction per the CVSS 4.0 vector.
Reflected cross-site scripting (XSS) in openstatusHQ openstatus allows unauthenticated remote attackers to inject malicious scripts via the callbackURL parameter in the Onboarding Endpoint component. The vulnerability affects the onboarding client functionality and requires user interaction to exploit. Vendor has released a patched version (commit 43d9b2b9ef8ae1a98f9bdc8a9f86d6a3dfaa2dfb), and no public exploit code is currently identified.