Rockstar Games · Report #149673
Reflected XSS in reddeadredemption Site located at www.rockstargames.com/reddeadredemption
Validstatus
mediumseverity
17upvotes
25 Sept 2017disclosed
Summary
The researcher found that one of our video players had a Reflected XSS vulnerability, and was able to demonstrate the vulnerability with a POC. The POC also included a WAF bypass, allowing us to fix two problems at once, so in recognition of that fact we opted to award a bonus.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.