Rockstar Games · Report #241231
flash injection in http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf
Validstatus
mediumseverity
8upvotes
25 Aug 2017disclosed
Summary
In this report, the researcher found a vulnerability in one of our Flash players (http://www.rockstargames.com/IV/imgPlayer/imageEmbed.swf) that allowed loading of external .swf files. This in turn allowed the researcher to perform a XSS attack.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.