Gratipay · Report #211149

Inadequate/dangerous jQuery behavior

Validstatus

lowseverity

8upvotes

5 Apr 2017disclosed

How it was found

Every text/javascript response gets executed. JQuery 1.10.2 is vulnerable and executes response received. https://assets.gratipay.com/jquery.min.js?etag=YoBy5yEtsejNrLIrIXUs2g~~

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original