1
AngularJS xss payload
https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/XSS%20Injection/XSS%20in%20Angular.md
2
CVE-2020-11110
https://ctf-writeup.revers3c.com/challenges/web/CVE-2020-11110/index.html
相关文章
- 01-14bugbounty
2024-01-14 21:13:22
1
https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/XSS%20Injection/XSS%20in%20Angular.md
2
Vulnerable Versionsstored XSS由于 originalUrl 字段中的输入保护不足，Grafana 中的此漏洞允许攻击者注入 JavaScript 代码，该代码将在访问快照后单击 Open Original Dashboard 后执行。这种攻击可以在没有身份验证的版本上6.3.3执行，并且只能在身份验证的情况下执行6.3.3 >= 6.7.1
https://ctf-writeup.revers3c.com/challenges/web/CVE-2020-11110/index.html