Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, but the check only strips `javascript:` and a few patterns. `data:` URLs (for example data:image/svg+xml,…) still pass. If a sanitized value is used in href/src, an attacker can execute a script. There is currently no fix for this issue.
URL verification implemented in the src/utils/validation.ts file only blocks the 'javascript:' scheme and several other selected patterns, leaving the 'data:' scheme unrestricted. A user controlling the URL value can pass an address in the format 'data:image/svg+xml,...' containing an embedded script. Once this prepared value passes validation and is placed in the href or src attribute of an HTML element, it is executed by the victim's browser as JavaScript code.
An attacker can execute arbitrary JavaScript code in the context of the victim's browser, leading to session data theft, user account takeover, or modification of page content. Due to the changed scope (Scope: Changed), the impact may extend beyond the direct application and affect other resources in the browser.
According to available information, the vendor has not yet released any patch for this issue. Monitor vendor references (GitHub Security Advisory GHSA-fjch-4g87-g4p4) and apply the patch immediately upon release. Until a fix becomes available, it is recommended to restrict access to the application or implement additional server-side filtering mechanisms and Content Security Policy (CSP) headers.
All versions of Promptcraft Forge Studio — no excluded versions indicated by the vendor.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N