CVE-2019-18426 PoC — Facebook WhatsApp 跨站脚本漏洞

Source

https://github.com/PerimeterX/CVE-2019-18426

Associated Vulnerability

Title:Facebook WhatsApp 跨站脚本漏洞 (CVE-2019-18426)
Description:A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message.

Readme

# WhatsApp Vulnerabilities Disclosure - Open Redirect + CSP Bypass + Persistent XSS + FS read permissions + potential for RCE

## [CVE-2019-18426](https://nvd.nist.gov/vuln/detail/CVE-2019-18426)

## [Technical Article](./article/)

## [Original Vulnerabilities Disclosures Documents](./docs)

## [DEMO Vids!](./vids)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →