writeups.xyz / Exploiting Web3’s Hidden Attack Surface: Universal XSS on Netlify’s Next.js Library

Submitter : c2a

Date: 21 September 2022

Bounty : undisclosed

Vulnerabilities :

• Universal XSS
• SSRF
• Open Redirect
• Web Cache Poisoning

Programs :

• Netlify
• Gemini
• PancakeSwap
• Docusign
• Moonpay
• Celo

Authors :

• Sam Curry (@Samwcyo)

Link :
https://samcurry.net/universal-xss-on-netlifys-next-js-library/