inDrive · Report #2014955
#1 XSS on watchdocs.indriverapp.com
Validstatus
lowseverity
147upvotes
11 Apr 2024disclosed
Summary
And subscribe to our telegram channel with updates https://t.me/indrive_bbp
How it was found
Summary:
XSS on watchdocs.indriverapp.com
Steps To Reproduce:
- Go to https://watchdocs.indriverapp.com/webview/v1/refresh-jwt?redirect=%22%3E%3Cimg%20src=faw%20onerror=alert(1)%3E
- An alert window will popup
{F2401964}
Impact
Allow executing js code on users browsers