Skip to content

Instantly share code, notes, and snippets.

@cd80

cd80/gist:a75b618419d5afb137cd5a29e8156420

Created November 7, 2023 09:44
Show Gist options
  • Save cd80/a75b618419d5afb137cd5a29e8156420 to your computer and use it in GitHub Desktop.
Save cd80/a75b618419d5afb137cd5a29e8156420 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
- CVE ID
CVE-2023-46492
- Name of affected product and versions
github.com/mldbai/mldb
version <= 2017.04.17.0
- Problem type
Attacker can execute arbitrary javascript code in victim's browser by sending specifically crafted url that exploits DOM based XSS in container_files/public_html/doc/index.html.
- Description
There is a DOM based XSS vulnerability in container_files/public_html/doc/index.html due to setting iframe src with unsanitized user input from location.hash.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment