Lucene search
RezadutyEA90F8B9-D8FE-4432-9A52-4D663400C52FHistoryDec 12, 2022 - 5:24 a.m.
Html Injection in Activity
2022-12-1205:24:40
rezaduty
www.huntr.dev
5
html injection
activity
workflow
proof of concept
dashboard
security bug
0.001 Low
EPSS
Percentile
25.5%
Description
Html injection in Activity and just only need html payload in workflow and fire in Activity list
Proof of Concept
- navigate to dashboard and workflow settings
- insert new workflow with this payload
<h1>test</h1>
- open the activity list
POC:
https://drive.google.com/file/d/1yDznjYdHFZ4WJNRk8LEHlZhvonyghZQE/view?usp=sharing
https://drive.google.com/file/d/1kBA8oF-SaMVI8aVkM39Ora8GBdDvKjIT/view?usp=sharing
Related
cve
cve
CVE-2023-0643
2023-02-02 12:15:09
cvelist
cvelist
osv
osv
CVE-2023-0643
2023-02-02 12:15:09
prion
prion
Input validation
2023-02-02 12:15:00
nvd
nvd
CVE-2023-0643
2023-02-02 12:15:09