These responses had the Content Type: text/html, so could have been interpreted as HTML by clients, resulting in a potential reflected cross-site scripting vulnerability. Additionally, some URLs provided by global-build-stats plugin that modify data did not require POST requests to be sent, resulting in a ...
from Google Alert - vulnerability http://ift.tt/2GjCgBn
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment