Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/05/29 2:29 a.m.39 views

Khan Academy: Bypass the fix of report #1078283 due to poor validation

Hi Khan Academy Team, I was able to bypass the fix you implemented for report 1078283. The URL validation you implemented on the endpoint continue checks the presence of khanacademy.org however it doesn't have any boundary checking to ignore domains starting with .org, so if an attacker register ...

0.7AI score
SaveExploits0
Rows per page
Query Builder