{"id":"GSD-2023-1001657","summary":"XSS in website version all current versions","details":"In the ZeroSSL website https://app.zerossl.com an XSS exists in it that can be attacked via phishing resulting in theft of private certificate keys, hashed password and/or session hijacking. It is not clear if the vendor has fixed this issue or not at this time.","modified":"2023-03-14T07:01:09.296630Z","published":"2023-01-19T17:20:01.004554Z","withdrawn":"2023-03-14T07:01:09.296630Z","references":[{"type":"WEB","url":"https://groups.google.com/a/ccadb.org/g/public/c/kqtoGeEv5Fc"},{"type":"WEB","url":"https://groups.google.com/a/ccadb.org/g/public/c/kqtoGeEv5Fc/m/F5-vTOM4CwAJ"}],"schema_version":"1.7.3"}