Twitter | Search | |
Matt Austin Nov 30
I wanted to fully test this “Responsible Disclosure” theory so I submitted a one click RCE in Microsoft Teams to on Sep 01, 2018. It is still open. The disclosure policy of and others gets bugs fixed. This does not.
Reply Retweet Like
Samuel Attard Nov 30
Replying to @mattaustin
Whats happening here, iframe -> window open -> no context isolation -> rekt?
Reply Retweet Like
Matt Austin Nov 30
Replying to @MarshallOfSound
Exactly. Some special conditions to force the window without context isolation, but yes.
Reply Retweet Like
Derek Moy Dec 2
Replying to @mattaustin
Reply Retweet Like