Recorded Future · Report #1448616
Dom Xss vulnerability
Informativestatus
highseverity
8upvotes
19 Jan 2022disclosed
How it was found
Summary:
Dom Xss vulnerability
Steps To Reproduce:
[add details for how we can reproduce the issue]
- Go to this link: https://api.recordedfuture.com/index.html
- Open chrome devtool and go to console tab
- Type: document.write('...<script>alert(1)</script>...');
- And boom! Alert 1!
Impact
XSS can have huge implications for a web application and its users. User accounts can be hijacked, credentials could be stolen, sensitive data could be exfiltrated, and lastly, access to your client computers can be obtained.