Correct example reflected XSS exploit URL.

jasnow · Apr 27, 2024 · e97ec3f · e97ec3f
1 parent bc3e9f0
commit e97ec3f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gems/sidekiq/CVE-2024-32887.yml b/gems/sidekiq/CVE-2024-32887.yml
@@ -9,7 +9,7 @@ description: |
   Reflected XSS in Sidekiq Web UI via the `/metrics` HTTP end-point and the
   `substr` query param:
 
-      https://{host}/sidekiq/metrics?substr=foot%22%3E%3Cscript%20src=%22{payload}
+      https://{host}/sidekiq/metrics?substr=foot%22%3E%3Cscript%20src=%22{payload}%22%20/%3E
 
 cvss_v3: 5.5
 unaffected_versions: