General Motors · Report #124578
Angular Expression Injection in the my.gmc.com Search Page
Validstatus
2upvotes
9 Jun 2017disclosed
Summary
My GMC website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.