Cloudflare ke /cdn-cgi/image/ endpoint me XSS vulnerability mili
Yahan publish hua 28 Oct, 9:27 pm IST · Source ki tareekh 28 Oct, 8:28 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
Security researcher ne Cloudflare ke /cdn-cgi/image/ endpoint me reflected XSS vulnerability discover ki, jo attacker ko malicious script inject karne ki ijazat deti hai. Issue ko Cloudflare ne acknowledge kiya hai.
Aapko kya karna haiAgar aap Cloudflare CDN use karte hain, to temporary mitigation ke liye CSP headers aur input sanitization enable karein.
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- Vulnerability ka disclosure Cloudflare ke security advisory se aaya hai.Cache Me If You Can: XSS in Cloudflare's /cdn-cgi/image/ ↗
Aapki raay