Rockstar Games · Report #246505

Reflected XSS via Double Encoding

Validstatus

mediumseverity

$500bounty

22upvotes

1 Sept 2017disclosed

Summary

The researcher found a Reflected XSS vulnerability in the search query on support.rockstargames.com. This exploit worked by using double-encoding to bypass our filters. With the researcher's help we were able to resolve this vulnerability.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original