cross domain local storage project cross domain local storage vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

An issue exists in xdLocalStorage up to and including 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the parent object. Therefore any domain can load the application hosti...

Cross Domain Local Storage Project Cross Domain Local Storage

5.8

CVSSv2

An issue exists in xdLocalStorage up to and including 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the iframe object. Therefore any domain that is currently loaded within the ifra...

Cross Domain Local Storage Project Cross Domain Local Storage

5.8

CVSSv2

An issue exists in xdLocalStorage up to and including 2.0.5. The receiveMessage() function in xdLocalStoragePostMessageApi.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to...

Cross Domain Local Storage Project Cross Domain Local Storage

5.8

CVSSv2

An issue exists in xdLocalStorage up to and including 2.0.5. The receiveMessage() function in xdLocalStorage.js does not implement any validation of the origin of web messages. Remote attackers who can entice a user to load a malicious site can exploit this issue to impact the co...

Cross Domain Local Storage Project Cross Domain Local Storage

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook