1 result · Clear filters · Feed
-
Medium —
Read the Docs vulnerable to Cross-Site Scripting (XSS)
### Impact This vulnerability allowed a malicious user to serve arbitrary HTML files from the main application domain (readthedocs[.]org/readthedocs[.]com) by exploiting a vulnerability in the code that serves downloadable content from a project. Exploiting t…