Sourcehut account takeover via build logs (XSS in ansi2html)
Hacker News1 min read84 words
A security vulnerability in Sourcehut has been disclosed, involving an account takeover attack vector that exploits a cross-site scripting (XSS) flaw within the ansi2html component. The issue specifically relates to the handling of build logs, which allowed for the compromise of user accounts.
The details of this security incident were published in a blog post by Arusekk, which has since been discussed on the Hacker News platform. The discussion thread associated with the article has garnered 32 points and 3 comments from the community.
Read the original at Hacker News
🤖 AI-generated content — This article was automatically summarised from public RSS feeds by AutoBrief. Verify important information with the original source.