8x8 · Report #418248
Post based XSS (Cross site scripting) on https://apimgr.8x8.com
Validstatus
mediumseverity
8upvotes
22 Jun 2020disclosed
Summary
The legacy API endpoint utilized an outdated version of WSO2 Data Analytics Server that contained a known XSS vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.