Khan Academy · Report #13314

CRLF Injection

Informativestatus

2upvotes

7 Aug 2014disclosed

How it was found

Is it possible for a remote attacker to inject custom HTTP headers. For example, an attacker can inject session cookies or HTML code. This may conduct to vulnerabilities like XSS (cross-site scripting) or session fixation.

PoC https://crowdin.khanacademy.org/page/in-context-localization?email=%0d%0a%20InjectedBy:BigBear

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original