writeups.xyz / MeshCentral Cross-Site Websocket Hijacking Vulnerability (CVE-2024-26135)

Submitter : c2a

Date: 28 February 2024

Bounty : undisclosed

Vulnerabilities :

• Cross-Site WebSocket Hijacking (CSWH)

Programs :

• MeshCentral

Authors :

• Adam Crosser

Link :
https://www.praetorian.com/blog/meshcentral-cross-site-websocket-hijacking-vulnerability/