How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Gitter XSS Crypto Mining Security Issue Notification

calendar_today February 16, 2018 person Eric Eastwood domain gitter

Issue Summary An XSS exploit in our KaTeX parser was used to embed a JavaScript crypto miner in clients via an exploitative message. The exploitative message was spread across 25 rooms and 146 users read those messages. The messages were available for about 1 hour ( minutes after being reported ) before being cleaned up across the board. User Remediation Steps To check if you are affected, open

open_in_new Read original post