CVE-2018-6824 Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'emai...
MediumCVSS 6.1
EPSS 0.77%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"attacker@example.com"' request, which can be followed by a password reset.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cozy | = 2.0 | No fix listed |
References
- www.lynxsecurity.io exploit third-party-advisory