CVE-2026-25117
8.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N
Summary
pwn.college DOJO is an education platform for learning cybersecurity. Prior to commit e33da14449a5abcff507e554f66e2141d6683b0a, missing sandboxing on /workspace/* routes allows challenge authors to inject arbitrary javascript which runs on the same origin as http[:]//dojo[.]website. This is a sandbox escape leading to arbitrary javascript execution as the dojo's origin. A challenge author can craft a page that executes any dangerous actions that the user could. Version e33da14449a5abcff507e554f66e2141d6683b0a patches the issue.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| pwncollege | dojo | < e33da14449a5abcff507e554f66e2141d6683b0a | affected |
Weaknesses
- CWE-20: CWE-20: Improper Input Validation
- CWE-79: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://github.com/pwncollege/dojo/security/advisories/GHSA-wvcf-9xm8-7mrg
- https://github.com/pwncollege/dojo/commit/e33da14449a5abcff507e554f66e2141d6683b0a
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.