Skip to content

Instantly share code, notes, and snippets.

@cd80

cd80/gist:32c8df129c0efe36cae27cd2fcc85fef

Last active February 14, 2024 07:24
Show Gist options
  • Save cd80/32c8df129c0efe36cae27cd2fcc85fef to your computer and use it in GitHub Desktop.
Save cd80/32c8df129c0efe36cae27cd2fcc85fef to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
- CVE ID
CVE-2024-24052
- Name of affected product and versions
https://github.com/clappr/clappr
version <= 0.5.0
- Problem type
Attacker can execute arbitrary javascript code in victim's browser by sending specifically crafted url that exploits DOM based XSS in /packages/player/public/index.html.
- Description
Cross Site Scripting (XSS) vulnerability in the component /packages/player/public/index.html of github repository clappr/clappr allows attackers to execute arbitrary javascript code via sending a crafted URL to a victim.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment