HexBrain

Rockstar Games · Report #488108

Dom based xss on /reddeadredemption2/br/videos

Validstatus
mediumseverity
16upvotes
24 Jun 2020disclosed

Summary

In this report, the researcher identified a DOM-based XSS vulnerability affecting localized versions of the Red Dead Redemption 2 video viewer on our website, e.g. www.rockstargames.com/reddeadredemption2/br/videos. This affected all major modern browsers, and could have been used for cookie or sensitive token theft. Thanks to this report we were able to identify the issue and push out a fix, preventing this attack from being exploited.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original