Create CVE-2023-4357-Chrome-XXE漏洞.md

This commit is contained in:
wy876 2023-11-19 18:41:08 +08:00 committed by GitHub
parent 0192011846
commit da853c2306
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -0,0 +1,17 @@
## CVE-2023-4357-Chrome-XXE漏洞
CVE-2023-4357-Chrome-XXE
Chrome XXE 漏洞 POC
实现对访客者本地文件读取
## 影响版本
```
Chrome 版本 < 116.0.5845.96
Chromium 版本 < 116.0.5845.96
Electron 版本 < 26.1.0
```
## poc
```
https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE
```