Browser script execution via model-decoded payloads
Published Aug 14, 2024 · Updated Mar 25, 2025
Stored XSS in Stition Devika from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onward allows remote attackers to execute browser scripts. MessageInput.svelte applies DOMPurify only to direct user entries, so an LLM can decode an encoded payload that the interface later interprets when displaying model output. Exploitation requires a selected model and prompt that decode the attacker-supplied string; the demonstrated consequence is script execution in the Devika web interface.
Summary
What happened
Stored XSS in Stition Devika from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onward allows remote attackers to execute browser scripts. MessageInput.svelte applies DOMPurify only to direct user entries, so an LLM can decode an encoded payload that the interface later interprets when displaying model output. Exploitation requires a selected model and prompt that decode the attacker-supplied string; the demonstrated consequence is script execution in the Devika web interface.
The record
- CVE
- CVE-2024-7790
- Published
- Aug 14, 2024
- Updated
- Mar 25, 2025
- Vendor
- Stition
- Product
- Devika
- Classifications
- CWE-79, T1059.007
- Attack vector
- network
- Privileges
- unauthenticated
Timeline
How it unfolded
- Aug 14, 2024CVE publishedPublication date reported by the CVE source.
- Mar 25, 2025Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
Compare these published version ranges with your installed build and any vendor patches.
- Affected versionversion=6acce21fb08c3d1123ef05df6a33912bf0ee77c2 <=*
- Affected versionversion=6acce21fb08c3d1123ef05df6a33912bf0ee77c2 <=current
What conditions does exploitation require?
What is affected?
Published CVSS scores
CVSS describes severity. EPSS estimates exploitation probability.
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
- Tenable DevikaAI stored XSS demonstrationproof of concept · demonstrated
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo