Rockstar Games · Report #265274
Stored XSS on support.rockstargames.com
Validstatus
mediumseverity
$1,000bounty
11upvotes
30 Oct 2017disclosed
Summary
In this report, the researcher demonstrated an AngularJS injection that allowed them to leave Stored XSS attacks on Support Community threads. We were able to resolve this issue and others by updating the version of AngularJS we run on the Support site.
.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.