Skip to content

Latest commit

 

History

History

2023_gartner_peer_insights_widget_postmessage_dom_xss

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 

postMessage DOM XSS vulnerability in Gartner Peer Insights widget

A DOM XSS vulnerability in the Gartner Peer Insights Widget affected sites such as Black Kite, Gradle, LogRhythm, ReversingLabs, SentinelOne, Synopsys, Tata Communications, Veeam, Vodafone and more.

The writeup directory contains a full writeup of the bug, the patch, the bypassing of the patch, and the final patch by the vendor. It's presented as a HTML file, and is intended to be hosted from a host that contains the string "gartner.com" in the domain name. As of the time of writing, a copy is hosted at https://gartner.com.ring0.lol/

The demo directory contains copies of various versions of the widget JavaScript code, as well as webpages that consume them. The writeup contains dynamic Proof of Concept components that target these demos. As of the time of writing, a copy of the demos is hosted at https://justinsteven.github.io/gartnerpeerinsightsxssdemo

There is a video on YouTube that discusses many aspects of this issue.