XSS via File upload Vulnerability in Canva – (PoC)
TTS Demo
URL: http://www.canva.com
Vulnerability: Cross-site scripting (Via Image upload)
Severity: High
Owasp rank: (OTG-INPVAL-002)
The Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software. The ranking of all vulnerabilities on this channel in followed by Owasp Testing Guide version 4.0.
https://www.owasp.org/images/1/19/OTGv4.pdf
#TDWFB #TheDayWeFightBack
2017-07-11 15:20:11
source
Gloss