Skip to content
FileStack Upload Advisory
bishopfox.com | vulnerability | #web-security | #xss | #cross-site-scripting | #vulnerability-advisory | #filestack | #svg-upload
Summary
A FileStack advisory describing a cross-site scripting flaw: JavaScript embedded in uploaded SVG files executes in the cdn.filestackcontent.com origin; mitigations include CSP and sandboxing.
- Published
- Collected