expoc - DOMPurify Server-Side PoC
Flujo: input -> POST /sanitize (Node + jsdom + DOMPurify) -> render vulnerable con innerHTML.
Se usa render vulnerable: sink.innerHTML = '<wrapper>' + sanitized + '</wrapper>'.
(empty)
Started by GitHub push by andreapoli
Running as SYSTEM
Building in workspace /var/lib/jenkins/workspace/GovWay
[WS-CLEANUP] Clean-up disabled, skipping workspace deletion.
The recommended git tool is: NONE
No credentials specified
> /usr/bin/git rev-parse --resolve-git-dir /var/lib/jenkins/workspace/GovWay/.git # timeout=10
Fetching changes from the remote Git repository
> /usr/bin/git config remote.origin.url https://github.com/link-it/govway.git # timeout=10
Fetching upstream changes from https://github.com/link-it/govway.git
> /usr/bin/git --version # timeout=10
> git --version # 'git version 2.47.1'
> /usr/bin/git fetch --tags --force --progress -- https://github.com/link-it/govway.git +refs/heads/*:refs/remotes/origin/* # timeout=10
> /usr/bin/git rev-parse origin/3.4.x^{commit} # timeout=10
Checking out Revision 6c9a57eb237970f5bd0560a207039603d6778d2b (origin/3.4.x)
> /usr/bin/git config core.sparsecheckout # timeout=10
> /usr/bin/git checkout -f 6c9a57eb237970f5bd0560a207039603d6778d2b # timeout=10
Commit message: "[GovWayConsole] Corretto un problema nel Controllo Accessi di erogazioni ModI con profilo PDND/OAuth, dove il campo "Stato" dell'Autenticazione Token risultava erroneamente modificabile su API con risorse definite in versioni precedenti del prodotto."
> /usr/bin/git rev-list --no-walk 1e1bbba2f77e07deb7a493f4db2a18679042b3b1 # timeout=10
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
Run condition [Boolean condition] enabling prebuild for step [BuilderChain]
[GovWay] $ /bin/bash /tmp/jenkins4781757799009687134.sh
=============================
General Info
Workspace: /var/lib/jenkins/workspace/GovWay
Build: true
Deploy: true
Test: true
Test Integrazione: true
=============================
=============================
Environment Info
HOME: /var/lib/jenkins
ANT_OPTS: -Xmx1024m -XX:MaxMetaspaceSize=700m -XX:+UseG1GC
MAVEN_OPTS:
SOFTHSM2_CONF: /home/ec2-user/lib/softhsm/softhsm2.conf
SONAR_SCANNER_OPTS:
=============================
=============================
Java
openjdk version "21.0.7" 2025-04-15 LTS
OpenJDK Runtime Environment Temurin-21.0.7+6 (build 21.0.7+6-LTS)
OpenJDK 64-Bit Server VM Temurin-21.0.7+6 (build 21.0.7+6-LTS, mixed mode, sharing)
=============================
=============================
Maven
Apache Maven 3.0.5 (Red Hat 3.0.5-17)
Maven home: /usr/share/maven
Java version: 21.0.7, vendor: Eclipse Adoptium
Java home: /opt/openjdk-21.0.7+6
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "4.14.94-89.73.amzn2.x86_64", arch: "amd64", family: "unix"
=============================
=============================
ANT
Apache Ant(TM) version 1.10.15 compiled on August 25 2024
=============================
=============================
Git Info
Url: https://github.com/link-it/govway.git
branch: origin/3.4.x
commit: 6c9a57eb237970f5bd0560a207039603d6778d2b
previuos commit: 1e1bbba2f77e07deb7a493f4db2a18679042b3b1
previuos successful commit: 1e1bbba2f77e07deb7a493f4db2a18679042b3b1
commit message: [GovWayConsole]
Corretto un problema nel Controllo Accessi di erogazioni ModI con profilo PDND/OAuth,
dove il campo "Stato" dell'Autenticazione Token risultava erroneamente modificabile su API con risorse definite in versioni precedenti del prodotto.
=============================
=============================
NODEjs Info
v22.14.0
{
npm: '10.9.2',
node: '22.14.0',
acorn: '8.14.0',
ada: '2.9.2',
amaro: '0.3.0',
ares: '1.34.4',
brotli: '1.1.0',
cjs_module_lexer: '1.4.1',
cldr: '46.0',
icu: '76.1',
llhttp: '9.2.1',
modules: '127',
napi: '10',
nbytes: '0.1.1',
ncrypto: '0.0.1',
nghttp2: '1.64.0',
nghttp3: '1.6.0',
ngtcp2: '1.10.0',
openssl: '3.0.15+quic',
simdjson: '3.10.1',
simdutf: '6.0.3',
sqlite: '3.47.2',
tz: '2024b',
undici: '6.21.1',
unicode: '16.0',
uv: '1.49.2',
uvwasi: '0.0.21',
v8: '12.4.254.21-node.22',
zlib: '1.3.0.1-motley-82a5fec'
}
=============================
=============================
OWASP ZAP Info 'ZAP_2.17.0'
Associo diritti di esecuzione agli script zap ...
Associati diritti di esecuzione agli script zap
Update ...
Execute: /opt/openjdk-21.0.7+6/bin/java -classpath /opt/zaproxy/ZAP_2.17.0/*:/opt/zaproxy/ZAP_2.17.0/lib/* org.zaproxy.zap.ZAP -cmd -addonupdate -port 8280 -host 127.0.0.1
Defaulting ZAP install dir to /opt/zaproxy/ZAP_2.17.0
Add-on update check complete
Update effettuato
=============================
Fermo application server ...
[00;31mStoping Tomcat[00m
WARNING: package java.net.HttpURLConnection not in java.base
Pid Tomcat: 25518
[00;31mwaiting for processes to gracefully shutdown (0/60)[00m
[00;31mwaiting for processes to gracefully shutdown (1/60)[00m
[00;31mwaiting for processes to gracefully shutdown (2/60)[00m
[00;31mwaiting for processes to gracefully shutdown (3/60)[00m
[00;31mwaiting for processes to gracefully shutdown (4/60)[00m
[00;31mwaiting for processes to gracefully shutdown (5/60)[00m
[00;31mwaiting for processes to gracefully shutdown (6/60)[00m
[00;31mwaiting for processes to gracefully shutdown (7/60)[00m
[00;31mwaiting for processes to gracefully shutdown (8/60)[00m
[00;31mwaiting for processes to gracefully shutdown (9/60)[00m
[00;31mwaiting for processes to gracefully shutdown (10/60)[00m
[00;31mwaiting for processes to gracefully shutdown (11/60)[00m
[00;31mwaiting for processes to gracefully shutdown (12/60)[00m
[00;31mwaiting for processes to gracefully shutdown (13/60)[00m
[00;31mwaiting for processes to gracefully shutdown (14/60)[00m
[00;31mwaiting for processes to gracefully shutdown (15/60)[00m
[00;31mwaiting for processes to gracefully shutdown (16/60)[00m
[00;31mwaiting for processes to gracefully shutdown (17/60)[00m
[00;31mwaiting for processes to gracefully shutdown (18/60)[00m
[00;31mwaiting for processes to gracefully shutdown (19/60)[00m
[00;31mwaiting for processes to gracefully shutdown (20/60)[00m
[00;31mwaiting for processes to gracefully shutdown (21/60)[00m
[00;31mwaiting for processes to gracefully shutdown (22/60)[00m
[00;31mwaiting for processes to gracefully shutdown (23/60)[00m
[00;31mwaiting for processes to gracefully shutdown (24/60)[00m
[00;31mwaiting for processes to gracefully shutdown (25/60)[00m
[00;31mwaiting for processes to gracefully shutdown (26/60)[00m
[00;31mwaiting for processes to gracefully shutdown (27/60)[00m
[00;31mwaiting for processes to gracefully shutdown (28/60)[00m
[00;31mwaiting for processes to gracefully shutdown (29/60)[00m
[00;31mwaiting for processes to gracefully shutdown (30/60)[00m
[00;31mwaiting for processes to gracefully shutdown (31/60)[00m
[00;31mwaiting for processes to gracefully shutdown (32/60)[00m
[00;31mwaiting for processes to gracefully shutdown (33/60)[00m
[00;31mwaiting for processes to gracefully shutdown (34/60)[00m
[00;31mwaiting for processes to gracefully shutdown (35/60)[00m
[00;31mwaiting for processes to gracefully shutdown (36/60)[00m
[00;31mwaiting for processes to gracefully shutdown (37/60)[00m
[00;31mwaiting for processes to gracefully shutdown (38/60)[00m
[00;31mwaiting for processes to gracefully shutdown (39/60)[00m
[00;31mwaiting for processes to gracefully shutdown (40/60)[00m
[00;31mwaiting for processes to gracefully shutdown (41/60)[00m
[00;31mwaiting for processes to gracefully shutdown (42/60)[00m
[00;31mwaiting for processes to gracefully shutdown (43/60)[00m
[00;31mwaiting for processes to gracefully shutdown (44/60)[00m
[00;31mwaiting for processes to gracefully shutdown (45/60)[00m
[00;31mwaiting for processes to gracefully shutdown (46/60)[00m
[00;31mwaiting for processes to gracefully shutdown (47/60)[00m
[00;31mwaiting for processes to gracefully shutdown (48/60)[00m
[00;31mwaiting for processes to gracefully shutdown (49/60)[00m
[00;31mwaiting for processes to gracefully shutdown (50/60)[00m
[00;31mwaiting for processes to gracefully shutdown (51/60)[00m
[00;31mwaiting for processes to gracefully shutdown (52/60)[00m
[00;31mwaiting for processes to gracefully shutdown (53/60)[00m
[00;31mwaiting for processes to gracefully shutdown (54/60)[00m
[00;31mwaiting for processes to gracefully shutdown (55/60)[00m
[00;31mwaiting for processes to gracefully shutdown (56/60)[00m
[00;31mwaiting for processes to gracefully shutdown (57/60)[00m
[00;31mwaiting for processes to gracefully shutdown (58/60)[00m
[00;31mwaiting for processes to gracefully shutdown (59/60)[00m
[00;31mwaiting for processes to gracefully shutdown (60/60)[00m
[00;31mGracefully shutdown didn't stop tomcat after 60 seconds[00m
[00;33mTerminating Tomcat[00m
Pid Tomcat: 25518
[00;31mwaiting for processes to terminate (0/20)[00mFermo application server effettuato
Ripulisco log application server ...
Ripulisco log application server effettuato
Predispongo dir testsuite ...
Predispongo dir testsuite ok
Ripulisco output jacoco ...
Ripulisco output jacoco effettuato
Fermo sonarqube ...
Gracefully stopping SonarQube...
Stopped SonarQube.
Fermo sonarqube effettuato
Verifico che il workspace non esista ...
Non e' stata rilevata una corretta re-inizializzazione del Workspace
[Boolean condition] checking [true] against [^(1|y|yes|t|true|on|run)$] (origin token: ${GOVWAY_BUILD})
Run condition [Boolean condition] enabling perform for step [BuilderChain]
[GovWay] $ /bin/sh -xe /tmp/jenkins5563370864550481880.sh
+ perl -pi -e s/log4bash.appender=ColorConsoleAppender/log4bash.appender=ConsoleAppender/g /var/lib/jenkins/workspace/GovWay/distrib/log4bash.properties
+ sed -i -e 's#
Flujo: input -> POST /sanitize (Node + jsdom + DOMPurify) -> render vulnerable con innerHTML.
Se usa render vulnerable: sink.innerHTML = '<wrapper>' + sanitized + '</wrapper>'.
(empty)
Flujo: input -> POST /sanitize (Node + jsdom + DOMPurify) -> render vulnerable con innerHTML.
Se usa render vulnerable: sink.innerHTML = '<wrapper>' + sanitized + '</wrapper>'.
(empty)
Flujo: input -> POST /sanitize (Node + jsdom + DOMPurify) -> render vulnerable con innerHTML.
Se usa render vulnerable: sink.innerHTML = '<wrapper>' + sanitized + '</wrapper>'.
(empty)
Flujo: input -> POST /sanitize (Node + jsdom + DOMPurify) -> render vulnerable con innerHTML.
Se usa render vulnerable: sink.innerHTML = '<wrapper>' + sanitized + '</wrapper>'.
(empty)