Insecure crossdomain.xml

Disclosed: 2015-04-04 00:03:14 By smiegles To mobilevikings
Unknown
Vulnerability Details
Hi, https://mobilevikings.be/crossdomain.xml contains the following xml file: ``` <?xml version="1.0"?> <cross-domain-policy> <allow-access-from domain="*" secure="true" /> </cross-domain-policy> ``` This will make any one able to receive content from https://mobilevikings.be/. More information about this issue is available here: http://gursevkalra.blogspot.nl/2013/08/bypassing-same-origin-policy-with-flash.html Best regards, Olivier Beg
Actions
View on HackerOne
Report Stats
  • Report ID: 44652
  • State: Closed
  • Substate: resolved
  • Upvotes: 6
Share this report