Vulnerabilidades do Factionsecurity Faction

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Factionsecurity Faction: 4 registro(s), com versões afetadas e correções.

CVE-2026-44669 Alta · 8.7 CWE-79 26/05/2026

Faction: Stored XSS in Assessment Attachment Filename Preview Rendering

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in assessment file preview flows. User-supplied filename values are persisted and later rendered into HTML/attribute contexts without output encoding, allowing attacker-controlled JavaScript to execute in the browser of any user who views the affected page. Because the payload is stored server-side and rendered to other users, exploitation is persistent and can impact privileged accounts. This vulnerability is fixed in 1.8.3.

CVE-2026-44668 Crítica · 9.8 CWE-306 26/05/2026

FACTION: falta de autenticação em ações Struts2 do framework de pentest

FACTION é uma estrutura de geração e colaboração de relatórios de testes de penetração. Antes da versão 1.8.3, o AccessControlInterceptor, a barreira de autenticação para todas as ações do Struts2, chama incondicionalmente invocation.invoke() sem verificar uma sessão válida. Quatro métodos de ação em BoilerPlateConfig também não realizam nenhuma verificação local de sessão, permitindo que um atacante não autenticado leia, sobrescreva, desative e exclua permanentemente qualquer modelo de texto padrão (boilerplate) do sistema. Esta vulnerabilidade é corrigida na versão 1.8.3.

CVE-2026-44667 Alta · 8.7 CWE-79 26/05/2026

Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to 1.8.3, Faction is vulnerable to stored cross-site scripting (XSS) via attachment filenames in remediation verification file preview flows. User-supplied filename values are persisted and then rendered into HTML and attribute contexts without output encoding, allowing attacker-controlled JavaScript to execute in the browser of any user who opens the affected verification/remediation views. Because the payload is stored server-side and rendered to other users, exploitation is persistent and can impact privileged accounts. This vulnerability is fixed in 1.8.3.

CVE-2025-66022 Crítica · 9.8 CWE-862 26/11/2025

FACTION Unauthenticated Custom Extension Upload leads to RCE

FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s extension framework permits untrusted extension code to execute arbitrary system commands on the server when a lifecycle hook is invoked, resulting in remote code execution (RCE) on the host running Faction. Due to a missing authentication check on the /portal/AppStoreDashboard endpoint, an attacker can access the extension management UI and upload a malicious extension without any authentication, making this vulnerability exploitable by unauthenticated users. This issue has been patched in version 1.7.1.