Vulnerable-VueJS

This is a repository to study attack surface of VueJS.

Many articles online talked about VueJS vulnerabilities in lengthy and wordly sentences with little example codes. Here, I aim to provide short and simple PoC codes for educational purpose.

Client-Side Vulnerabilities

All the PoCs documented here only require a browser.

Cross-Side Scripting (XSS)
Client-side Template Injection (CSTI)
URL Injection / Open Redirect
Style Injection

Server-side Vulnerabilities

Oops! VueJS is client-side front end language!

References: