India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks

guest · Aug 6, 2021

India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks
August 6, 2021
https://thehackernews.com/2021/08/indias-koo-twitter-like-service-found.html

Koo, India's homegrown Twitter clone, recently patched a serious security vulnerability that could have been exploited to execute arbitrary JavaScript code against hundreds of thousands of its users, spreading the attack across the platform.

The vulnerability involves a stored cross-site scripting flaw (also known as persistent XSS) in Koo's web application that allows malicious scripts to be embedded directly into the affected web application.
The issue was discovered by security researcher Rahul Kankrale in July, following which a fix was rolled out by Koo on July 3.
Click to expand...

It was discovered by Prasoon Gupta, an independent security researcher. In an interview with The Hacker News, Prasoon explained that the vulnerability arises due to the way the app validates access tokens when a user is authenticated with a phone number and an one-time password (OTP) sent to it.
Click to expand...

Log in or Sign up

India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks

guest Guest

Log in or Sign up

India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks

guest Guest

Useful Searches