cover
Article Per Year (5 Year)
All
Home Page
OAI Link
Editorial Team
Contact
Reviewer
Google Scholar
Contact Name
Muhammad Taufiq Nuruzzaman
Contact Email
m.taufiq@uin-suka.ac.id
Phone
+6287708181179
Journal Mail Official
jiska@uin-suka.ac.id
Editorial Address
Teknik Informatika, Fak. Sains dan Teknologi, UIN Sunan Kalijaga Jln. Marsda Adisucipto No 1 55281 Yogyakarta
Location
Kab. sleman,
Daerah istimewa yogyakarta
INDONESIA
JISKa (Jurnal Informatika Sunan Kalijaga)
Published by Universitas Islam Negeri Sunan Kalijaga Yogyakarta
ISSN : 25275836     EISSN : 25280074     DOI : -
Core Subject : Science, Engineering,
Computer Science & IT Electrical & Electronics Engineering Library & Information Science
JISKa (Jurnal Informatika Sunan Kalijaga) adalah jurnal yang mencoba untuk mempelajari dan mengembangkan konsep Integrasi dan Interkoneksi Agama dan Informatika yang diterbitkan oleh Departemen Teknik Informasi UIN Sunan Kalijaga Yogyakarta. JISKa menyediakan forum bagi para dosen, peneliti, mahasiswa dan praktisi untuk menerbitkan artikel penelitiannya, mengkaji artikel dari para kontributor, dan teknologi baru yang berkaitan dengan informatika dari berbagai disiplin ilmu
Arjuna Subject : -
Articles 251 Documents
 22   23   24   25   26 
From Open Redirect to JavaScript Execution via CVE-2024-4367 Muhammad Hendra Sunarya; M. Nanda Dede Nugroho; Reja Revaldy F; Ryan Rizky Pratama
JISKA (Jurnal Informatika Sunan Kalijaga) Vol. 11 No. 3 (2026): September 2026
Publisher : UIN Sunan Kalijaga Yogyakarta

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.14421/jiska.6353

Abstract

This case study presents a forensically documented analysis of a multi-stage security incident involving CVE-2024-4367, an arbitrary JavaScript execution vulnerability in PDF.js. The incident occurred on one PKP Open Journal Systems (OJS) deployment. The observed chain involved an open redirect in the host platform's sign-out handler (CWE-601), a prefix-match URL validation weakness in the PDF.js viewer wrapper, and PDF.js font parsing behavior associated with CVE-2024-4367. The evidence demonstrates execution of attacker-controlled JavaScript in the viewer context and an SEO-poisoning effect; it does not establish a general vulnerability in all OJS, WordPress, Drupal, or enterprise deployments. CVSS scores are reported separately for the identified CVE and are not combined into a fabricated composite score. A defense-in-depth mitigation strategy combining reverse-proxy rules, library patches, and Content Security Policy was deployed and verified.

Page 26 of 26 | Total Record : 251

 22   23   24   25   26 

Filter by Year

2016 2026


Reset
Filter By Issues
All Issue Vol. 11 No. 3 (2026): September 2026 Vol. 11 No. 2 (2026): May 2026 Vol. 11 No. 1 (2026): January 2026 Vol. 10 No. 3 (2025): September 2025 Vol. 10 No. 2 (2025): May 2025 Vol. 10 No. 1 (2025): January 2025 Early Access Vol. 9 No. 3 (2024): September 2024 Vol. 9 No. 2 (2024): Mei 2024 Vol. 9 No. 1 (2024): Januari 2024 Vol. 8 No. 3 (2023): September 2023 Vol. 8 No. 2 (2023): Mei 2023 Vol. 8 No. 1 (2023): Januari 2023 Vol. 7 No. 3 (2022): September 2022 Vol. 7 No. 2 (2022): Mei 2022 Vol. 7 No. 1 (2022): Januari 2022 Vol. 6 No. 3 (2021): September 2021 Vol. 6 No. 2 (2021): Mei 2021 Vol. 6 No. 1 (2021): Januari 2021 Vol. 5 No. 3 (2020): November 2020 Vol. 5 No. 2 (2020): September 2020 Vol. 5 No. 1 (2020): Mei 2020 Vol. 4 No. 3 (2020): Januari 2020 Vol. 4 No. 2 (2019): September 2019 Vol. 4 No. 1 (2019): Mei 2019 Vol. 3 No. 3 (2019): Januari 2019 Vol. 3 No. 2 (2018): September 2018 Vol. 3 No. 1 (2018): Mei 2018 Vol. 2 No. 3 (2018): Januari 2018 Vol. 2 No. 2 (2017): September 2017 Vol. 2 No. 1 (2017): Mei 2017 Vol. 1 No. 3 (2017): Januari 2017 Vol. 1 No. 2 (2016): September 2016 Vol. 1 No. 1 (2016): Mei 2016 More Issue