cve/2021/CVE-2021-33501.md

CVE-2021-33501

Description

Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL.

POC

Reference

• https://github.com/swordbytes/Advisories/blob/master/2021/Advisory_CVE-2021-33501.pdf
• https://swordbytes.com/blog/security-advisory-overwolf-1-click-remote-code-execution-cve-2021-33501/

Github

• https://github.com/fardeen-ahmed/Bug-bounty-Writeups
• https://github.com/swordbytes/Advisories