2 ms·

Possibly unrelated. How can they elevate from a script injected in the frontend to the database of all users? Also, the vulnerability seems to be a domain over

Possibly unrelated. How can they elevate from a script injected in the frontend to the database of all users? Also, the vulnerability seems to be a domain overtake. But Archive is self hosting a static version of the dependency?

jszymborski 2y ago
One way would might be to capture credentials for admin accounts if they have a "god mode".