Project

General

Profile

Actions
Copy link

Defect #13069

closed

XSS with images

Added by Vlad Sychov almost 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
High
Assignee:
-
Category:
Accounts / authentication
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Duplicate
Affected version:

Description

If you write in image source address like this: http://www.redmine.org/logout then after image loading user will sigh out.
Sorry for my bad English.
Example: !http://www.redmine.org/logout?a.gif!

Related issues

Is duplicate of Redmine - Defect #13022: Image pointing towards /logout signs out userClosedJean-Philippe Lang

Actions
Actions
Copy link

Also available in: Atom PDF