StarSea99 starsea-mall 保存におけるクロスサイトスクリプティング

Successful exploitation of CVE-2025-2085 allows an attacker to execute arbitrary JavaScript code within the context of a user's browser session on the starsea-mall application. This can lead to various malicious outcomes, including session hijacking, defacement of the administrative interface, and theft of sensitive user data, such as login credentials or personal information. Given the administrative context of the affected endpoint, an attacker could potentially gain control over the entire application if they can successfully inject and execute malicious code.

Administrators and users of starsea-mall version 1.0 are at risk. Shared hosting environments utilizing starsea-mall are particularly vulnerable, as a compromised account on one site could potentially impact other sites hosted on the same server.

1. 2025-03-07Disclosure

   disclosure

1. 予約済み2025-03-07
2. 公開日2025-03-07
3. EPSS 更新日2026-04-02

The primary mitigation for CVE-2025-2085 is to upgrade starsea-mall to version 1.0.1 or later, which contains the necessary fix. If upgrading is not immediately feasible, consider implementing input validation and sanitization on the redirectUrl parameter to prevent the injection of malicious scripts. Web application firewalls (WAFs) configured to detect and block XSS attacks can also provide an additional layer of protection. Verify the upgrade by attempting to access the /admin/carousels/save endpoint with a crafted redirectUrl parameter after the upgrade; the parameter should be properly sanitized and not execute any JavaScript.