HexBrain

Rockstar Games · Report #149673

Reflected XSS in reddeadredemption Site located at www.rockstargames.com/reddeadredemption

Validstatus
mediumseverity
17upvotes
25 Sept 2017disclosed

Summary

The researcher found that one of our video players had a Reflected XSS vulnerability, and was able to demonstrate the vulnerability with a POC. The POC also included a WAF bypass, allowing us to fix two problems at once, so in recognition of that fact we opted to award a bonus.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original