Information disclosure due to non-filtering of img src code

Summary

First of all, I want to say that I have found this vulnerability in many places. LinkedIn, MEE6, Upwork etc. (all disclosed)​

---

Vulnerability Description

And what is this vulnerability?;

Using the “Collaborator” feature on the BurpSuite tool, we get an address and the ip addresses of the people who enter this address, that is, wherever they enter, give us the referer, user-agent and ip address.

The feature that makes this vulnerability...​

Read more

Читать далее...