U.S. Dept Of Defense · Report #186316
DNS Misconfiguration
Duplicatestatus
4upvotes
22 Dec 2016disclosed
Summary
Multiple reporters identified a DNS configuration issue in the defense.gov domain that could allow same-site scripting. Thanks to @myst404 for first reporting this, and to @atik-rahman and others for also reporting it.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.