secDevLabs
secDevLabs copied to clipboard
[A3] - Injection - SSType
This solution refers to which of the apps?
- SSType
What did you do to mitigate the vulnerability?
I replaced NAMEWHERE with the variable 'name' surrounded by double curly braces, which now is getting the value of ‘name’ variable.
Did you test your changes? What commands did you run?
Yes, I used all commands in 'Attack Narrative'