writeups.xyz / A pair of Plotly bugs: Stored XSS and AWS Metadata SSRF

Submitter : c2a

Date: 25 May 2017

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• SSRF

Programs :

• Plotly

Authors :

• Yasin Soliman (@SecurityYasin)

Link :
https://ysx.me.uk/a-pair-of-plotly-bugs-stored-xss-and-aws-metadata-ssrf/