Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2024/07/03 5:48 p.m.11 views

MetaMask: Missing Line Terminator on allowedOrigins enables origin spoofing

The vulnerability identified by @pkkr was related to the Snaps allowedOrigins functionality, which allows Snap developers to control which origins can interact with certain Snap APIs. Due to a missing regex terminator, the origin control could be bypassed, enabling a malicious domain to access...

7AI score
SaveExploits0
Rows per page
Query Builder