writeups.xyz / Blog: OmniSpace, from automated 0day XSS to RCE

Submitter : c2a

Date: 12 September 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• XSS
• Account Takeover
• CSRF
• Insecure File Upload
• LFI
• Security Code Review

Programs :

• Agora-Project (OmniSpace)

Authors :

• Florent (@Pepito_oh)

Link :
https://preprod.patrowl.io/blog-omnispace-from-automated-xss-to-rce-cve-2023-40228/