Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/03/01 12:00 p.m.24 views

Slack: HTML Injection inside Slack promotional emails

Hi, There's a HTML injection vulnerability present inside emails sent from slack when the FIRST name on the account contains HTML. The html is stored in the backend database and when emails are sent promotional, etc, the HTML is sent along with the rest of the email. In my PoC, which is provided...

2.6AI score
SaveExploits0
Rows per page
Query Builder