government public service

technology software

adult content

news/blog

English

Within the Czech country-code top-level domain (.cz), 'fi.muni.cz' is registered, featuring subdomain 'fi'. Count 4 characters in 'muni' with two vowels and 2 consonants. It segments into 1 word: muni. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

lang

html/d0/f1/d0f1e747-a505-4d33-aa99-9af3d1e974a5.html.gz

default-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:; report-uri https://fadmin.fi.muni.cz/noauth/report.mpl?loc=fi-ssl&src=cspro&ver=2018032700

default-src 'none'; img-src 'self' data: https://is.muni.cz https://muni.islogin.cz https://thetis.ip6.fi.muni.cz https://thetis.ip4.fi.muni.cz http://*.m2.fi.muni.cz; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'; frame-src 'self'; connect-src 'self' wss://fadmin.fi.muni.cz; font-src 'self'; manifest-src 'self'; report-uri https://fadmin.fi.muni.cz/noauth/report.mpl?loc=fadmin-ssl&src=cspro&ver=2020070900, default-src https: 'self' 'unsafe-inline' 'unsafe-eval' data:; report-uri https://fadmin.fi.muni.cz/noauth/report.mpl?loc=fi-ssl&src=cspro&ver=2018032700

default-src 'none'; img-src 'self' data: https://is.muni.cz https://muni.islogin.cz https://thetis.ip6.fi.muni.cz https://thetis.ip4.fi.muni.cz http://*.m2.fi.muni.cz; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self'; frame-src 'self'; connect-src 'self' wss://fadmin.fi.muni.cz; font-src 'self'; manifest-src 'self'; report-uri https://fadmin.fi.muni.cz/noauth/report.mpl?loc=fadmin-ssl&src=cspro&ver=2020070900

application/x-www-form-urlencoded; charset=utf-8

1c6642a2bfc0e4e827f3302c2235b0f2afc7ee633a2560a0474ed1a8cf89dfb5

2065aecca0fb9b0567358d352ed5f1ab72fce139bf449b4d09805f5d9c3725ed

94e3871010f08014ac1bdceb848a39cd7ae711d7cfeb744e9cecb710720e2974

11e132f1e3859ac2aa1b6847b5e420ca450bbf61ec78349345488f4012bdf81b

7d2836b5f6c3233aa64bcb92aab8ff262c2e69c7dc2553321c0d1c1aa2d970ad

643dc9512a4efa9959a6475a7e7fcdf906b492aedd5c423e83867f8f153dd13e

### Impact

Affected versions of this package are vulnerable to Prototype Pollution.  A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting.  If you allow users to insert custom HTML code blocks into your page/app via parsing Markdown code blocks (or similar) and do not filter the language names the user can provide you may be vulnerable. 

The pollution should just be harmless data but this can cause problems for applications not expecting these properties to exist and can result in strange behavior or application crashes, i.e. a potential DOS vector. 

_If your website or application does not render user provided data it should be unaffected._

### Patches

Versions 9.18.2 and 10.1.2 and newer include fixes for this vulnerability.  If you are using version 7 or 8 you are encouraged to upgrade to a newer release.

### Workarounds

#### Patch your library

Manually patch your library to create null objects for both `languages` and `aliases`:

```js
const HLJS = function(hljs) {
  // ...
  var languages = Object.create(null);
  var aliases = Object.create(null);
```

#### Filter out bad data from end users:

Filter the language names that users are allowed to inject into your HTML to guarantee they are valid.

### References

* [What is Prototype Pollution?](https://codeburst.io/what-is-prototype-pollution-49482fc4b638)
* https://github.com/highlightjs/highlight.js/pull/2636

### For more information

If you have any questions or comments about this advisory:

* Please file an issue against [highlight.js](https://github.com/highlightjs/highlight.js/issues/)

### Impact: Potential ReDOS vulnerabilities (exponential and polynomial RegEx backtracking)

[oswasp](https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS): 

> The Regular expression Denial of Service (ReDoS) is a Denial of Service attack, that exploits the fact that most Regular Expression implementations may reach extreme situations that cause them to work very slowly (exponentially related to input size). An attacker can then cause a program using a Regular Expression to enter these extreme situations and then hang for a very long time.

If are you are using Highlight.js to highlight user-provided data you are possibly vulnerable.  On the client-side (in a browser or Electron environment) risks could include lengthy freezes or crashes... On the server-side infinite freezes could occur... effectively preventing users from accessing your app or service (ie, Denial of Service).

This is an issue with grammars shipped with the parser (and potentially 3rd party grammars also), not the parser itself. If you are using Highlight.js with any of the following grammars you are vulnerable.  If you are using `highlightAuto` to detect the language (and have any of these grammars registered) you are vulnerable. Exponential grammars (C, Perl, JavaScript) are auto-registered when using the common grammar subset/library `require('highlight.js/lib/common')` as of 10.4.0 - see https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@10.4.0/build/highlight.js

All versions prior to 10.4.1 are vulnerable, including version 9.18.5. 

**Grammars with exponential backtracking issues:**

  - c-like (c, cpp, arduino)
  - handlebars (htmlbars)
  - gams
  - perl
  - jboss-cli
  - r
  - erlang-repl
  - powershell
  - routeros
  - livescript (10.4.0 and 9.18.5 included this fix)
  - javascript & typescript (10.4.0 included partial fixes)

And of course any aliases of those languages have the same issue. ie: `hpp` is no safer than `cpp`.

**Grammars with polynomial backtracking issues:**

- kotlin
- gcode
- d
- aspectj
- moonscript
- coffeescript/livescript
- csharp
- scilab
- crystal
- elixir
- basic
- ebnf
- ruby
- fortran/irpf90
- livecodeserver
- yaml
- x86asm
- dsconfig
- markdown
- ruleslanguage
- xquery
- sqf

And again: any aliases of those languages have the same issue. ie: `ruby` and `rb` share the same ruby issues.


### Patches

- Version 10.4.1 resolves these vulnerabilities.  Please upgrade.

### Workarounds / Mitigations

- Discontinue use the affected grammars. (or perhaps use only those with poly vs exponential issues)
- Attempt cherry-picking the grammar fixes into older versions...
- Attempt using newer CDN versions of any affected languages.  (ie using an older CDN version of the library with newer CDN grammars).  Your mileage may vary.

### References

- https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS

### For more information

If you have any questions or comments about this advisory:
* Open an issue: https://github.com/highlightjs/highlight.js/issues
* Email us at [security@highlightjs.com](mailto:security@highlightjs.com)

9cfd0423d07d69df08a0552d8b6abb11005a6dc139312e6fd2792f45f51b6273

0a2e4636fce39cef77e8fc0c738585e4a0433aaedbccefe650b584581ea25c4d

c1e6d78cd34b91e56805d2e721074c83a5df2f6f137fc9317c559bc1e096103b

viewport

ICBM

x-generated

theme-color

Faculty of Informatics, Masaryk University

Faculty of Informatics Masaryk University

muni.cz

IRT-CSIRT-MU

Abuse-C Role

ORG-MU9-RIPE

Masarykova univerzita - Ustav vypocetni techniky

ORG-NCC1-RIPE

TENCZ-MNT

MUNINET-MNT

MUNI-TCZ


        var _paq = _paq || [];
        _paq.push(["setDoNotTrack", true]);
        _paq.push(["disableCookies"]);
        
        _paq.push(['trackPageView']);
        _paq.push(['enableLinkTracking']);

        (function() {
            var u="https://fadmin.fi.muni.cz/piwik/";
            _paq.push(['setTrackerUrl', u+'piwik.php']);
            _paq.push(['setSiteId', 26]);
            var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0];
            g.type = 'text/javascript'; g.async = true; g.defer = true; g.src = u + 'piwik.js'; s.parentNode.insertBefore(g, s);
        })();
    

$(document).ready(function () { App.run({}); });

Requests	IP Address	Location	AS Autonomous System
46	147.251.48.1	Brno, South Moravian, Czech Republic	AS2852CESNET z.s.p.o.
46	1	-	-

Security Scan Report: fi.muni.cz

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History