1 matches found
Khan Academy: Bypass the fix of report #1078283 due to poor validation
Hi Khan Academy Team, I was able to bypass the fix you implemented for report 1078283. The URL validation you implemented on the endpoint continue checks the presence of khanacademy.org however it doesn't have any boundary checking to ignore domains starting with .org, so if an attacker register ...
0.7AI score
SaveExploits0
20