Skip to content
OpenAdvisories

Vendor

cle-b

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.1

    httpdbg before 2.2.1 Stored Cross-Site Scripting via javascript URL

    httpdbg before 2.2.1 fails to validate URL schemes in recorded HTTP request URLs rendered as clickable links in the web interface. Attackers controlling traffic recorded by httpdbg can supply javascript: scheme URLs that execute malicious scripts in the appli…