Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-19587 PoC — Yellowfin 跨站脚本漏洞

Source
https://github.com/Deepak983/CVE-2020-19587
Associated Vulnerability
Title:Yellowfin 跨站脚本漏洞 (CVE-2020-19587)
Description:Yellowfin是澳大利亚Yellowfin公司的一套创新的数据和分析产品。 Yellowfin Business Intelligence 7.3版本存在安全漏洞，该漏洞源于在configMap参数中发现包含跨站点脚本（XSS）漏洞。攻击者利用该漏洞可通过MIAdminStyles.i4 Admin UI执行任意代码。
File Snapshot

 [4.0K]  /data/pocs/b1d8639091a091a3b4c361983a9e4be0b4c11451
└── [4.1M]  _Stored XSS in MIAdminStyles.i4 through privileges escalation.pdf

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.