cronoh NanoVault Cross-Site Scripting Vulnerability in xrb URL Handler

A cross-site scripting vulnerability has been identified in cronoh NanoVault versions through 1.2.1. The issue arises in the xrb URL Handler component, specifically within the executeJavaScript function of main.js. This vulnerability allows for remote code execution by injecting a malicious xrb URL, which is processed by the application, executing the embedded code on the user's machine.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the victim's machine.

Reproduction

To reproduce this vulnerability, embed a crafted xrb URL into a website. When a user clicks the link, the NanoVault application will open and execute the JavaScript payload injected into the URL. This can be verified by including a command in the payload that, for example, opens a system application like Calculator.