| शीर्षक | Cross-Frame Scripting (XFS) - NeoMind Fusion Platform |
|---|
| विवरण | A XFS vulnerability was found at NeoMind Fusion Platform, when we requested the URI /fusion/portal/action/Link?link=<Link> we figured out that the link parameter was reflected at an iframe, without any kind of sanitization. It was necessary to be logged in the application.
Attack Vector:
It was possible to use this URL to send to any user that have access to this application.
Credits:
Lucas Silveira, Luigi Polidório, Red Team Softwall |
|---|
| स्रोत | ⚠️ https://l6x.notion.site/PoC-9f23bb9757374f82981de81604500d98?pvs=4 |
|---|
| उपयोगकर्ता | LuigiSoftwall (UID 51872) |
|---|
| सबमिशन | 31/07/2023 06:34 PM (3 साल पहले) |
|---|
| संयम | 25/08/2023 09:27 AM (25 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 238026 [NeoMind Fusion Platform तक 20230731 Link link क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|