Researchers Chain Cloudflare Security Flaws to Bypass CSP and Execute Malicious JavaScript

Nyxfrom the csp-bypass-via-image-features dept.

Searchlight Cyber researchers combined multiple minor vulnerabilities in Cloudflare's image handling to circumvent Content Security Policy protections and inject JavaScript into protected sites. The attack demonstrates how seemingly small flaws can become dangerous when chained together.

Read the original on cybersecuritynews-com.cdn.ampproject.org