writeups.xyz / Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities

Submitter : c2a

Date: 2 September 2024

Bounty : undisclosed

Vulnerabilities :

• Reflected XSS
• CSRF
• Security Code Review

Programs :

• Pyspider

Authors :

• Yaniv Nizry (@YNizry)

Link :
https://www.sonarsource.com/blog/basic-http-authentication-risk-uncovering-pyspider-vulnerabilities/