U.S. Dept Of Defense · Report #1457444
Reflected XSS at https://██████/██████ via "██████" parameter
Validstatus
mediumseverity
3upvotes
14 Feb 2022disclosed
How it was found
There is Reflected Cross site scripting issue at the following url:
https://██████████/██████
Proof Of Concept
https://████████/█████████████████=%22%3E%3Csvg/onload=alert(1)%3E█████████
█████
Best Regards
@pelegn
Impact
Cookies Exfiltration SOAP Bypass CORS Bypass Executing javascript on the victim behalf
System Host(s)
██████
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
Navigate to https://████████/████████████████████████=%22%3E%3Csvg/onload=alert(1)%3E██████████