A supply-chain breach: Taking over an Atlassian account
Target Program: Atlassian
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.
More Writeups Like This
pentester.land
by Alex Bryant, Aditya Dindi, Eric EsquivelHow Almost Sacrificing a University Group Project led to a Microsoft Bug Bounty
pentester.land
by Alvaro BaladaThe power of Client-Side Path Traversal: How I found and escalated 2 bugs through “../”
pentester.land
by Florent (@Pepito_oh)Blog: OmniSpace, from automated 0day XSS to RCE
pentester.land
by Aituglo (@aituglo)