| 제목 | lettura v0.1.22 XSS |
|---|
| 설명 | The description.content of media_object is directly concatenated into HTML and rendered via wraperWithRadix/HTMLReactParser without going through DOMPurify; controllable RSS content can be directly XSS'd to the main WebView, and the fact that CSP is off while Tauri allowlist is enabled with "fs" amplifies the impact. Attackers could exploit this vulnerability to launch an SSRF attack or read/write the contents of the Download folder. |
|---|
| 원천 | ⚠️ https://gist.github.com/youremailaddress/cba7c19a4eafcb326d0e912adf132be3 |
|---|
| 사용자 | cranb3rry (UID 72730) |
|---|
| 제출 | 2025. 12. 27. AM 03:13 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 01. 04. AM 09:57 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 339487 [zhanglun lettura 까지 0.1.22 RSS ContentRender.tsx 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 19 |
|---|