Akhil Babu

An issue exists in the Canvas AI submodule where image files uploaded via a custom API for use in the AI web chat are insufficiently validated before being saved to the temporary directory. This improper neutralization of input during web page generation can lead to Cross-Site Scripting (XSS), a condition where malicious scripts are injected into trusted websites.

An issue exists where the Canvas module allows Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The module enables image file uploads via a custom API, but validation rules only verify the file extension and ignore the file MIME type (Multipurpose Internet Mail Extensions, a standard that indicates the nature and format of a document). This allows a malicious user to upload non-image files. Depending on the web-server configuration, these files may be served with their actual MIME type, leading to XSS or other unexpected behavior.

Improper neutralization of input during web page generation allows Cross-Site Scripting (XSS). The module and specific submodules, including AI Automators, AI Translate, AI API Explorer, and AI Content Suggestions, enable the use of a Large Language Model (LLM) to generate HTML or Markdown for browser preview. Under certain conditions, rendering this HTML can lead to XSS or the exposure of secret communications within the context of the LLM request. This issue requires an attacker to be able to inject text into prompts to execute the attack.

A missing authorization issue allows forceful browsing. Certain Drupal core actions exposed as agent tools lack correct access validation, and some core actions are missing associated access-level definitions. This allows an agent to utilize Drupal core actions tools by bypassing access controls, provided the attacker can communicate with the affected agent and the site is configured to expose these tools to non-privileged users.

Missing authorization allows forceful browsing within the module that provides the entity type and runtime for agents to use tools. The issue occurs because the module does not sufficiently check required permissions when a tool loads content entities. Exploitation requires that an agent be configured to use the affected tool and that the attacker has access to that agent.