redditeur on Nostr: After exploited, this particular vulnerability seems pretty obvious (trusting ...
After exploited, this particular vulnerability seems pretty obvious (trusting uploadable media files to run within the root domain? INSANITY!), but I'd argue it's something easy to overlook.
Published at
2023-05-26 04:43:36Event JSON
{
"id": "e39c1d023255062184942c6aa1dd87a19d906641cf7ba5621cfbc2c7c5461b0e",
"pubkey": "ce39ad432ec74b932caa0e92367fca1d8a2f9730c4f93f23d4c93117a52a4475",
"created_at": 1685076216,
"kind": 1,
"tags": [
[
"p",
"d0dd0f56429d544919cf90b7a0aca600da99757ae2334ead0a7c68e3c5f33b29",
"wss://relay.mostr.pub"
],
[
"p",
"02a562e0e20eb5af11697306bb6738edc8c0478d10f8467769efacc33a261151",
"wss://relay.mostr.pub"
],
[
"p",
"1db0ca2d15b078a18b1a0b0c784ddd4036a5d3dbaf66da87bb0a6151728a765a",
"wss://relay.mostr.pub"
],
[
"p",
"79c4b3e2b1e7d8d74fa652cdc1dee37f9cd08fefdc13a79f8d1146c0b69fd1fb",
"wss://relay.mostr.pub"
],
[
"e",
"957d29361a629e335183b74991df1ae509e3a195ea128c9bd3f270cdfe9a7938",
"wss://relay.mostr.pub",
"reply"
],
[
"mostr",
"https://poa.st/objects/da12bb77-1442-411c-ba9a-94ed9cee30a7"
]
],
"content": "After exploited, this particular vulnerability seems pretty obvious (trusting uploadable media files to run within the root domain? INSANITY!), but I'd argue it's something easy to overlook.",
"sig": "57e05d58eafd9dd8e8d1e7f5cef79fc27f29fb2f6afd96a4a3130b694a23e826ca7cb84cd1daa4820104db0955b14ea10456a07026195cc979d406c0895d674b"
}