blinky-keys/cve-2026-48060Proof-of-concept exploit and vulnerable application demonstrating an HTML injection vulnerability in Litestar 2.21.0 via CSRF token, with Docker setup for testing.
This repo contains the proof of concept exploit and vulnerable application to demonstrate the HTML injection vulnerability present in version 2.21.0 of Litestar.
git clone https://github.com/Blinky-Keys/CVE-2026-48060
cd CVE-2026-48060
sudo docker build -t litestar_example .
sudo docker run --rm -it -p 8000:80 -p 8001:8080 litestar_example
Go to http://localhost:8001 and wait 5 seconds.