| शीर्षक | Selleo Labs Sp. z o.o. Mentingo learn-v2025.08.27 Unrestricted Upload |
|---|
| विवरण | Vulnerability Type: Stored Cross-Site Scripting (XSS)
Attack Vector: SVG File Upload
Affected Components: User Avatar Upload, Course Image Upload
Required Privileges: Student (lowest privilege level)
The application accepts image/svg+xml file uploads without proper sanitization or content validation. SVG files support embedded JavaScript through event handlers, creating an XSS vector when the SVG is accessed directly via its S3 storage URL.
Attacker uploads malicious SVG containing JavaScript payload as user avatar or course image
Victim inspects page elements and follows the direct S3 presigned URL to view the image
JavaScript payload executes in victim's browser context upon SVG load |
|---|
| स्रोत | ⚠️ https://gist.github.com/KhanMarshaI/ba3e74b331ce4ab602a5a22a59aaf819 |
|---|
| उपयोगकर्ता | KhanMarshal (UID 89610) |
|---|
| सबमिशन | 01/09/2025 11:47 AM (1 वर्ष पहले) |
|---|
| संयम | 19/09/2025 08:16 PM (18 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 325068 [Selleo Mentingo तक 2025.08.27 Profile Picture userAvatar अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|