writeups.xyz / [Netflix][Smart TV] — Chaining Self-XSS with Session poisoning.

Submitter : c2a

Date: 11 March 2023

Bounty : undisclosed

Vulnerabilities :

• Self-XSS
• Cookie Injection
• Session Management Issue

Programs :

• Netflix

Authors :

• Lyubomir Tsirkov (@Lyubo_tsirkov)

Link :
https://ltsirkov.medium.com/netflix-smart-tv-chaining-self-xss-with-session-poisoning-3eb7c78c7914