Counter-Strike 2 HTML injection bug exposes players’ IP addresses
December 11, 2023 at 03:11PM Valve addressed an HTML injection flaw in Counter-Strike 2, allowing users to inject images and obtain IP addresses. The flaw was fixed in a 7MB update, preventing the rendering of inputted HTML and potentially malicious IP logging. This issue was similar to a more severe XSS vulnerability in Counter-Strike: Global … Read more