1 result · Feed
-
Unscored —
Reflected XSS vulnerability in keter
# Reflected XSS vulnerability in keter Keter is an app-server/reverse-proxy often used with webapps build on Yesod web-framework. In the logic handling VHost dispatch, Keter was echoing back `Host` header value, unescaped, as part of an HTML error page. This …