1731719 - HTML injection to SSRF

Status: RESOLVED DUPLICATE of bug 1729452

(Firefox :: Untriaged, defect)

Description

[iamnew]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:75.0) Gecko/20100101 Firefox/75.0

Steps to reproduce:

vulnerable url: "https://support.mozilla.org/en-US/questions/new/firefox-enterprise/form"

This form allows injecting <img> html tag.

1. Visit: https://support.mozilla.org/en-US/questions/new/firefox-enterprise/form
2. Inject the following code in the description box

<img src="<your server addr>" width="200"/>
3. Then submit the form.

Actual results:

It will make a request to the specified server.