HexBrain

U.S. Dept Of Defense · Report #1252020

XSS on https://████████/████' parameter

Validstatus
mediumseverity
1upvotes
7 Apr 2022disclosed

How it was found

PoC

https://█████/██████████<img%20src=x%20onerror=alert()>

███████

Impact

XSS on https://████/

System Host(s)

███

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Got to

https://██████/███<img%20src=x%20onerror=alert()>

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original