Description

alf-event is vulnerable to Server Side Template Injection via angular

Proof of Concept

VIDEO: https://drive.google.com/file/d/13iLRNXjY75AoyvegOdu8W-FTPRBfQQVR/view?usp=sharing

With an authenticated user, access the admin panel. Create a organization and then Go to users and create new user having username {{ 7*7 }} in that organization Now login with this username and you can see "Logged in as 49" https://drive.google.com/file/d/1fEyyWBjQ2qOwxyFpt-exnuSxgOZ7_WxC/view?usp=share_link

###Payload

{{ 7*7 }}

Impact

The impact of server-side template injection vulnerabilities is generally critical, resulting in remote code execution by taking full control of the back-end server. Even without the code execution, the attacker may be able to read sensitive data on the server.