CVE-2023-36474

Interactsh server settings make users vulnerable to Subdomain Takeover

Description

Interactsh is an open-source tool for detecting out-of-band interactions. Domains configured with interactsh server prior to version 1.0.0 were vulnerable to subdomain takeover for a specific subdomain, i.e `app.` Interactsh server used to create cname entries for `app` pointing to `projectdiscovery.github.io` as default, which intended to used for hosting interactsh web client using GitHub pages. This is a security issue with a self-hosted interactsh server in which the user may not have configured a web client but still have a CNAME entry pointing to GitHub pages, making them vulnerable to subdomain takeover. This allows a threat actor to host / run arbitrary client side code (cross-site scripting) in a user's browser when browsing the vulnerable subdomain. Version 1.0.0 fixes this issue by making CNAME optional, rather than default.

Category

8.2
CVSS
Severity: High
CVSS 3.1 •
EPSS 0.86% Top 30%
Vendor Advisory github.com
Affected: projectdiscovery interactsh
Published at:
Updated at:

References

Link Tags
https://github.com/projectdiscovery/interactsh/security/advisories/GHSA-m36x-mgfh-8g78 vendor advisory
https://github.com/projectdiscovery/interactsh/issues/136 issue tracking
https://github.com/projectdiscovery/interactsh/pull/155 patch
https://labs.detectify.com/2014/10/21/hostile-subdomain-takeover-using-herokugithubdesk-more/ technical description

Frequently Asked Questions

What is the severity of CVE-2023-36474?
CVE-2023-36474 has been scored as a high severity vulnerability.
How to fix CVE-2023-36474?
To fix CVE-2023-36474, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-36474 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2023-36474 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-36474?
CVE-2023-36474 affects projectdiscovery interactsh.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.