CVE-2024-43396

MediumPublic PoC

Published: 20 August 2024

Published

20 August 2024

Modified

03 September 2024

KEV Added

—

Patch

—

CVSS Score v3.1 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS Score 0.0092 76.5th percentile

Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-43396 is a medium-severity Cross-site Scripting (CWE-79) vulnerability in Khoj Khoj. Its CVSS base score is 5.4 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 23.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as Enterprise AI Assistants; in the Other ATLAS/OWASP Terms risk domain; MITRE ATLAS techniques in scope: LLM Prompt Injection (AML.T0051), AI Model Inference API Access (AML.T0040), External Harms (AML.T0048).

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2024-2558

Vulnerability details

Khoj is an application that creates personal AI agents. The Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. The q parameter for the /api/automation endpoint does not get correctly sanitized…

when rendered on the page, resulting in the ability of users to inject arbitrary HTML/JS. This vulnerability is fixed in 1.15.0.

CWE(s): CWE-79

AI Security AnalysisAI

AI Category: Enterprise AI Assistants
Risk Domain: Other ATLAS/OWASP Terms
OWASP Top 10 for LLMs 2025: None mapped
Classification Reason: Khoj is an application for creating personal AI agents, which aligns with the Enterprise AI Assistants category as it involves AI agent functionality and automation features.

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1203 Exploitation for Client Execution Execution

Adversaries may exploit software vulnerabilities in client applications to execute code.

attack.mitre.org →

T1059.007 JavaScript Execution

Adversaries may abuse various implementations of JavaScript for execution.

attack.mitre.org →

T1539 Steal Web Session Cookie Credential Access

An adversary may steal web application or service session cookies and use them to gain access to web applications or Internet services as an authenticated user without needing credentials.

attack.mitre.org →

Why these techniques?

Stored XSS vulnerability enables arbitrary JavaScript execution in users' browsers via unsanitized task instructions, facilitating client-side exploitation (T1203), JavaScript interpreter abuse (T1059.007), and theft of web session cookies (T1539).