https://feed.craftedsignal.io/tags/ory-polis/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 26 Mar 2026 19:17:05 +0000https://feed.craftedsignal.io/briefs/2024-01-ory-polis-xss/Thu, 26 Mar 2026 19:17:05 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2024-01-ory-polis-xss/Ory Polis versions prior to 26.2.0 are vulnerable to DOM-based XSS due to improper handling of the `callbackUrl` parameter, allowing attackers to execute arbitrary JavaScript in a user's browser.Ory Polis, formerly known as BoxyHQ Jackson, is a service that bridges or proxies SAML login flows to OAuth 2.0 or OpenID Connect. A DOM-based Cross-Site Scripting (XSS) vulnerability has been identified in versions of Ory Polis prior to 26.2.0. This vulnerability arises from the application’s improper trust of the callbackUrl URL parameter within its login functionality. An attacker can exploit this by crafting a malicious link containing JavaScript code within the callbackUrl. When a…

]]>highadvisoryxssory-poliscve-2026-33506cloud