Skip to content

Instantly share code, notes, and snippets.

@cd80

cd80/gist:5b7702ffbfc8531f30b56356a4a7f4dd

Last active November 17, 2023 07:27
Show Gist options
  • Save cd80/5b7702ffbfc8531f30b56356a4a7f4dd to your computer and use it in GitHub Desktop.
Save cd80/5b7702ffbfc8531f30b56356a4a7f4dd to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
- CVE ID
CVE-2023-47417
- Name of affected product and versions
github.com/paulrouget/dzslides
All versions after 2011.07.25
- Problem type
Attacker can execute arbitrary javascript code in victim's browser by sending specifically crafted url that exploits DOM based XSS in shells/embedder.html.
- Description
There is a DOM based XSS vulnerability in shells/embedder.html due to setting iframe src with unsanitized user input from location.hash.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment