Rockstar Games · Report #232499
Control characters incorrectly handled on Crew Status Update
Validstatus
lowseverity
$250bounty
7upvotes
23 Jun 2017disclosed
Summary
The researcher found that it was possible to inject the NULL control character (%00) into the Crew Status field. This resulted in a condition in which a user may be unable to further update the Crew Status.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.