Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/07/13 5:57 a.m.53 views

Upserve : Ability to create own account UUID leads to stored XSS

I found an interesting bug where the system allows a user to create their own UUIDs. There are character length restrictions on this action, however it's not bound to a specific set of characters. Even so, I was able to include an external script that I URL shortened to just hit the character lim...

6.8AI score
SaveExploits0
Rows per page
Query Builder