HexBrain

U.S. Dept Of Defense · Report #184286

Reflected XSS on a Department of Defense website

Validstatus
mediumseverity
8upvotes
12 Jan 2017disclosed

Summary

A Department of Defense website was vulnerable to a reflected cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. juliocesar was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks juliocesar!

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original