Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2019/06/22 10:59 p.m.21 views

New Relic: Stored XSS via "my recent queries" selector in NRQL dashboard builder

This is a pretty simple one. Within NR One, there is a stored XSS via the dashboard builder. It appears in the "My recent queries" dropdown. You can attack other users with this bug by having them navigate to the link, I'll show an example below. Steps to Reproduce: 1. From NR1, navigate to the...

2.1AI score
SaveExploits0
Rows per page
Query Builder