HexBrain

Algolia · Report #238915

Text injection on status.algolia.com

Validstatus
lowseverity
4upvotes
25 Aug 2017disclosed

How it was found

Hi Algolia team!

I just found a text injection vulnerabilty in status.algolia.com/clusters . Please follow the steps below.

Vulnerable URL status.algolia.com

Steps to reproduce:

  • Go to Vulnerable URL
  • Add anything you want after the Vulnerable Url.

POC LIVE POC

F193293

Hope you fix it!

Thanks! Sh3r1

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original