CVE-2024-34064

This repository contains a Flask application vulnerable to CVE-2024-34064, demonstrating an attribute injection vulnerability. The `sanitize_attrs` function fails to properly sanitize user input, allowing malicious attributes to bypass validation.

This repository contains a functional Flask application demonstrating CVE-2024-34064, a vulnerability likely related to improper input sanitization in attribute handling. The `sanitize_attrs` function uses regex to filter keys, but the PoC shows how malicious input could bypass this, leading to potential XSS or other injection attacks.

This repository contains a Flask application vulnerable to Server-Side Template Injection (SSTI) via user-controlled input passed to `render_template`. The PoC demonstrates how arbitrary code execution can be achieved by exploiting Jinja2 template injection.

This repository contains a functional Flask application demonstrating CVE-2024-34064, a vulnerability in XML/HTML attribute sanitization. The `sanitize_attrs` function falsely claims to strip '=' characters, allowing attackers to inject malicious attributes like `onclick=alert(1)`.

This repository contains a functional Flask application demonstrating an XSS vulnerability in attribute sanitization. The `sanitize_attrs` function fails to strip dangerous characters like '=', '/', or '>', allowing injection of malicious attributes (e.g., `onclick=alert(1)`).

This repository contains a Flask application demonstrating CVE-2024-34064, a vulnerability related to improper input validation in XML attribute keys. The code includes a sanitization function that correctly validates keys, despite misleading comments suggesting otherwise.

This repository contains a Flask application demonstrating a fix for CVE-2024-34064, which involves sanitizing XML attribute keys to prevent injection attacks. The code includes a regex-based validation mechanism to drop malicious keys.