HexBrain

Recorded Future · Report #1448616

Dom Xss vulnerability

Informativestatus
highseverity
8upvotes
19 Jan 2022disclosed

How it was found

Summary:

Dom Xss vulnerability

Steps To Reproduce:

[add details for how we can reproduce the issue]

  1. Go to this link: https://api.recordedfuture.com/index.html
  2. Open chrome devtool and go to console tab
  3. Type: document.write('...<script>alert(1)</script>...');
  4. And boom! Alert 1!

Impact

XSS can have huge implications for a web application and its users. User accounts can be hijacked, credentials could be stolen, sensitive data could be exfiltrated, and lastly, access to your client computers can be obtained.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original