Open Akamai ARL XSS on http://master-config-████████

How it was found

Description:

Hello, I found a Reflected Cross site Scripting (XSS) Open Akamai ARL on http://master-config-██████████, With this security flaw is possible executing JS codes...

References

https://owasp.org/www-community/attacks/xss/ https://community.akamai.com/customers/s/article/WebPerformanceV1V2ARLChangeStartingFebruary282021?language=en_US

Impact

The attacker can execute JS code.

System Host(s)

master-config-█████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Go to http://master-config-████████/7/0/33/1d/www.citysearch.com/search?what=x&where=place%22%3E%3Csvg+onload=confirm(document.domain)%3E

Suggested Mitigation/Remediation Actions