Lucene search
PRIOn knowledge basePRION:CVE-2020-11610HistoryApr 07, 2020 - 6:15 p.m.
Design/Logic Flaw
2020-04-0718:15:00
PRIOn knowledge base
www.prio-n.com
1
An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the parent object. Therefore any domain can load the application hosting the “magical iframe” and receive the messages that the “magical iframe” sends.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cross_domain_local_storage | le | 2.0.5 |
Related
osv
osv
xdlocalstorage does not verify request origin
2022-05-24 17:13:39
CVE-2020-11610
2020-04-07 18:15:13
github
github
xdlocalstorage does not verify request origin
2022-05-24 17:13:39
nvd
nvd
CVE-2020-11610
2020-04-07 18:15:13
cvelist
cvelist
CVE-2020-11610
2020-04-07 17:19:06
cve
cve
CVE-2020-11610
2020-04-07 18:15:13