Top 10 winner
Practical client-side path-traversal attacks
Client side path traversal: JavaScript builds a resource URL by concatenating a user-controlled query parameter into the path, so encoded traversal sequences point the request at a different endpoint. Chained with an open redirect, whose Location a stylesheet load follows, it loads attacker CSS and exfiltrates data from the DOM.
Record
- Researcher
- @medi_0ne
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of @medi_0ne, first published at the original source. Preserved copies are kept so the citation survives its host.