Researchers at Assetnote (SL Cyber), led by Kevin Mizu and Adam Kues, have shown that Cloudflare’s /cdn-cgi/image/ endpoint can be chained into same-origin cross-site scripting (XSS). The attack combines three separate primitives. The researchers demonstrated a working XSS on www.cloudflare.com. Cloudflare image transformation flaw Cloudflare sits... Weiterlesen: Cloudflare Image Transformation Flaw Could Let Hackers Execute Malici…
Intelligence View
⚡ tsecurity.de Intelligence
Cloudflare Image Transformation Flaw Could Let Hackers Execute Malicious JavaScript on Websites
Researchers at Assetnote (SL Cyber), led by Kevin Mizu and Adam Kues, have shown that Cloudflare’s /cdn-cgi/image/ endpoint can be chained into same-origin c…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir