Together, they provided “an arbitrary file write and open” on a target machine. These functions were “send file” – used to pull information on user-provided content and to upload it to My Flow – and “open file,” intended for use in opening images but able to open any file type. The extension contained “higher privileges and access to native functions”, according to Renwa, and two of these functions, designed for use with My Flow, were of particular interest. Read more of the latest browser security news The bug bounty hunter has published a proof of concept (PoC) that demonstrates the exploit.Īfter examining the HTML page further, Renwa also found a hidden browser extension called Opera Touch Background. My Flow’s interface is loaded from, a feature that contained an XSS issue in its drag-and-drop functionality that could be used to launch an alert box.
Opera touch flow code#
My Flow can be used by scanning a QR code within the Touch mobile Opera browser. The technology allows users to exchange files, links, YouTube videos, photos and personal notes, and access them at any time from their connected mobile device or computer. The researcher chose to explore what he calls one of the “cooler” features of the Chromium-based browser, known as My Flow and described as an “encrypted space shared between Opera Touch and your Opera computer browser”. READ MORE Opera security team discloses multiple flaws in open source web proxy, Privoxy In a post dated September 24, Opera detailed the latest discovery of a bug bounty hunter with the handle ‘Renwa’, a member of the private disclosure scheme. The browser-maker runs a technical blog series on the most interesting vulnerabilities reported through its private bug bounty program. Opera has patched a severe cross-site scripting ( XSS) to remote code execution (RCE) web browser flaw.
A bug bounty hunter was able to pivot from XSS to full-blown RCE
0 kommentar(er)
