Security Flaw in CoCalc: One Click and Your Cloud is Ruined

Security Flaw in CoCalc: One Click and Your Cloud is Ruined. Imperva Threat Research discovered and reported a security flaw in the CoCalc Cloud environment, enabling potential attackers to take over a target’s account with a single click. The flaw resulted from a lack of separation between the user environment and the space where untrusted user files could be executed. This post explains the flaw, its exploitation, and how to prevent such attacks in applications