Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
Read the Docs Sphinx Search allows malicious search results with malicious content
published 2 years ago
Summary
A security issue in Read the Docs Sphinx Search allowed an attacker to inject malicious content into search results if a user searched a compromised project. This has been fixed in version 0.3.2. Users should update to this version to prevent a potential security risk. No exploitation has been detected.
What to do
- Update vaibhav gupta readthedocs-sphinx-search to version 0.3.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| pip | vaibhav gupta | readthedocs-sphinx-search |
<= 0.3.1 Fix: upgrade to 0.3.2
|
Original advisory text
readthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects
### Impact
This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the [advisory published in our readthedocs.org repo](https://github.com/readthedocs/readthedocs.org/security/advisories/GHSA-qhqx-5j25-rv48).
Users of this extension should update to the 0.3.2 version, and trigger a new build.
This issue was discovered by a member of our team, and we have seen no signs that this vulnerability was exploited in the wild.
### Patches
This issue has been patched in our 0.3.2 version.
### References
- https://github.com/readthedocs/readthedocs-sphinx-search/commit/8c6f6d01e88e72ef32ed0c220b6c19d1e1121c73
### For more information
If you have any questions or comments about this advisory, email us at [[email protected]](mailto:[email protected]) ([PGP](https://docs.readthedocs.io/page/security.html#pgp-key))
This vulnerability could have allowed an attacker to include arbitrary HTML content in search results by having a user search a malicious project. This was due to our search client not correctly escaping all user content from search results. You can find more information in the [advisory published in our readthedocs.org repo](https://github.com/readthedocs/readthedocs.org/security/advisories/GHSA-qhqx-5j25-rv48).
Users of this extension should update to the 0.3.2 version, and trigger a new build.
This issue was discovered by a member of our team, and we have seen no signs that this vulnerability was exploited in the wild.
### Patches
This issue has been patched in our 0.3.2 version.
### References
- https://github.com/readthedocs/readthedocs-sphinx-search/commit/8c6f6d01e88e72ef32ed0c220b6c19d1e1121c73
### For more information
If you have any questions or comments about this advisory, email us at [[email protected]](mailto:[email protected]) ([PGP](https://docs.readthedocs.io/page/security.html#pgp-key))
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published16 Jan 2024
Updated6 Mar 2026
First seen6 Mar 2026
Sources
GHSA-xgfm-fjx6-62mj · GHSA
Track software like this
Free during beta