Full Report
REDCap, developed by Vanderbilt University, is a secure platform designed for data collection in research studies and operations.
Analysis Summary
# Multiple Cross-Site Scripting (XSS) Vulnerabilities in REDCap
## Key Points
- Multiple XSS vulnerabilities were discovered in the REDCap application.
- The vulnerabilities allow an attacker to execute malicious JavaScript when clicking on specific links or elements within the application.
## Threat Actors
- **LevelBlue and Trustwave**: The companies behind the affected application, LevelBlue Completes Acquisition of Trustwave to Form the World's Largest Pure-Play MSSP.
## TTPs
- **Clickjacking Attack**: An attacker sends a message with an XSS payload to a standard conversation in REDCap.
- **Malicious JavaScript Execution**: The payload is executed when clicking on specific links or elements within the application.
## Affected Systems
- **REDCap Application**: The vulnerability affects the REDCap application, specifically its Messenger function and various fields where the XSS payload can be inserted.
## Mitigations
- **Update to Latest Version**: All users are strongly recommended to update to patch versions 15.0.27 LTS and 15.4.3 Standard immediately.
- **Implement Input Validation**: Ensure that user input is properly validated and sanitized to prevent similar attacks in the future.
## Conclusion
The discovery of multiple XSS vulnerabilities in the REDCap application highlights the importance of regular security testing and updates. Trustwave recommends immediate action to update to the latest patch versions and implement proper input validation to prevent similar attacks.