Researchers Unveil 'Vector Grief' Attack Bypassing SVG Sanitizers
A new attack technique dubbed 'Vector Grief' allows attackers to execute JavaScript in Firefox and Safari by manipulating response headers and exploiting how browsers parse SVG content across different MIME types, bypassing most popular SVG sanitizers.
Researchers have detailed a novel attack technique named "Vector Grief" that effectively bypasses six out of eight popular SVG sanitization libraries. This method exploits how web browsers interpret SVG content when delivered with specific response headers, enabling the execution of JavaScript even when the SVG payload itself appears to be benign XML.
The technique targets the parsing mechanisms of browsers, particularly Firefox and Safari, by leveraging different MIME types and response headers to trick the browser into rendering SVG content in unexpected ways. This allows attackers to inject and execute malicious JavaScript code within the context of the user's browser session.
One of the key findings involves manipulating XML namespaces within SVG elements. By switching the namespace of an element to XHTML, attackers can embed HTML content, including JavaScript-laden <frame> or <iframe> tags, directly into the SVG. This bypasses sanitizers that might not adequately validate namespace declarations or the content within them.
Another bypass demonstrated involves the use of <animate> and <animateTransform> tags within SVG. These tags, which are intended for animation, can be manipulated to load JavaScript URLs. For instance, an <animate> tag can be used to change the href attribute of a link to a JavaScript payload, which is then executed when the link is interacted with or rendered.
The research also highlights a sophisticated technique involving XSLT stylesheets. Attackers can embed a self-contained XSLT stylesheet within an SVG using a data: URL in an xml-stylesheet processing instruction. This stylesheet then transforms the SVG into HTML, embedding a script that executes JavaScript, effectively achieving cross-site scripting (XSS) within the SVG context.
Furthermore, the "Vector Grief" attack extends to manipulating response headers, specifically the Link header in Firefox. By using a data: URL within this header that points to an XSLT stylesheet, attackers can trigger the execution of JavaScript. This stylesheet can, in turn, load another payload, such as an <img> tag with an onerror handler, within a <foreignObject>, demonstrating a multi-stage exploitation chain.
The implications of this research are significant, as many web applications rely on SVG sanitizers to prevent XSS attacks. The bypass of widely-used libraries indicates a potential widespread vulnerability across applications that accept and process SVG uploads or embed SVG content. The researchers noted that one of the techniques, involving XSLT, is slated for deprecation in November 2026, but its effectiveness against current sanitizers remains a critical concern.
This discovery underscores the ongoing cat-and-mouse game between attackers and defenders in web security. As sanitization libraries evolve, attackers find new ways to exploit subtle parsing differences and browser behaviors. Developers are urged to review their SVG handling mechanisms and ensure they are protected against these advanced bypass techniques, especially given the potential for widespread impact.