cve/CVE-2023-24720.md at 694ac234a19db48cd3b1f78eb5f461ab1f6c99f7 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

639 B

Raw Blame History

CVE-2023-24720

Description

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file.

POC

Reference

https://infosec.zeyu2001.com/2023/readiumjs-cloud-reader-everybody-gets-an-xss

Github

No PoCs found on GitHub currently.