CVE-2018-6341 PoC — React 跨站脚本漏洞

Source

Associated Vulnerability

Title: React 跨站脚本漏洞 (CVE-2018-6341)
Description:React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was fixed in 16.0.1, 16.1.2, 16.2.1, 16.3.3, and 16.4.2.

Description

CVE-2018-6341

Readme

# CVE-2018-6341

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6341

A simple PoC to reproduce XSS vulnerability

## Steps
- `npm i`
- `npm run start`
- Go to `localhost:3006`

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →