HexBrain

GitLab · Report #402658

XSS in request approvals

Validstatus
mediumseverity
$3,000bounty
96upvotes
23 Apr 2021disclosed

How it was found

Hello, team!

I found xss.

Steps to reproduce:

  1. Open project settings
  2. paste in this field link777 {F339770}
  3. click on result {F339772}

In the username, a XSS poc should be written, like mine.

Impact

XSS.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original