Sourcehut account takeover via build logs (XSS in ansi2html)

发生了什么

A wormable vulnerability allowed anyone able to inject text in a build log on builds.sr.ht (or other instances) to take over accounts who viewed them

摘要按规则整理自下方来源原文

时间线

1. 19:54
   Hacker News 最先出现HHacker News
2. 20:38
   Lobsters 出现讨论LLobsters

来源