Back to directory
WRITEUP #833

Code Vulnerabilities Put Proton Mails at Risk

XSSSandbox bypassCSP bypassParsing issue
byPaul Gerste
Bounty
750
Program
Proton Mail
Published
Sep 4, 2023
Added to HackDex
Sep 13, 2023
Read Full Writeuphttps://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/
RELATED WRITEUPS
Bypassing CSP via URL Parser Confusions : XSS on Netlify’s Image CDN
XSSCSP bypass
Type confusion attacks in ProseMirror editors
XSSType confusion
Self-XSS to ATO via Site Features
XSSSelf-XSS
How 100% Manual Hacking (Without Even Kali And Burp) Led To 2 Medium Vulnerabilities On YesWeHack
XSS
Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
XSSReflected XSS

Built with ❤️ by Shubham Rawat