5 ms·

Looks like a stray index.html was able to slip in there somehow. It pulls a background image from https://new.action247.ag/assets/images/login-background.jpg h

by mholt 3y ago

Looks like a stray index.html was able to slip in there somehow. It pulls a background image from https://new.action247.ag/assets/images/login-background.jpg https://new.action247.ag/assets/images/login-background.jpg Roughly Google-translated from Indonesian, it's a shady gambling scam. It sends your form data to a WhatsApp number, 855717520276. Possibly a hole in Inkscape's CMS (Django)? There's also a fair amount of python code in their website repo, so maybe that, I dunno. From the bottom of their homepage: <a id="dev-stamp" href="https://gitlab.com/inkscape/inkscape-web"><img src="https://media.inkscape.org/static/images/django.svg" title="This site is running: Python 3.6.8 Django 2.2 App: CMS [Home] InkscapeWeb 1.6, as of Mon Aug 21 19:06:31 2023 (5420e21)" alt="PY"/></a> Django 2.2 was last updated over a year ago and has had a number of security patches. An issue should probably be filed on their GitLab: https://gitlab.com/inkscape/inkscape-web/-/issues/ https://gitlab.com/inkscape/inkscape-web/-/issues/

galbar 3y ago
Good idea, I just did that: https://gitlab.com/inkscape/inkscape-web/-/issues/647 https://gitlab.com/inkscape/inkscape-web/-/issues/647
- debugnik 3y ago
  Interesting, so this file was added using the gallery upload function, which accepts arbitrary files. And apparently the official releases are uploaded to the same URL directory? That's just asking for phishing. > Since this issue is closed, I suggest that you add your suggestion as a new issue I mean, I get it, but that sounds nonchalant for such a security issue; I'd expect the maintainer to open it themselves upon reading the problem. Although maybe that explains why the problem exists in the first place.
tuetuopay 3y ago
Given the rest of the files are fine, this is the most likely thing that happened. Especially since the file is a download and not a "raw" html file, someone found a way to upload this.

by mholt 3y ago

galbar 3y ago

Good idea, I just did that: https://gitlab.com/inkscape/inkscape-web/-/issues/647 https://gitlab.com/inkscape/inkscape-web/-/issues/647

debugnik 3y ago
Interesting, so this file was added using the gallery upload function, which accepts arbitrary files. And apparently the official releases are uploaded to the same URL directory? That's just asking for phishing. > Since this issue is closed, I suggest that you add your suggestion as a new issue I mean, I get it, but that sounds nonchalant for such a security issue; I'd expect the maintainer to open it themselves upon reading the problem. Although maybe that explains why the problem exists in the first place.

tuetuopay 3y ago

Given the rest of the files are fine, this is the most likely thing that happened. Especially since the file is a download and not a "raw" html file, someone found a way to upload this.