Rockstar Games · Report #488108
Dom based xss on /reddeadredemption2/br/videos
Validstatus
mediumseverity
16upvotes
24 Jun 2020disclosed
Summary
In this report, the researcher identified a DOM-based XSS vulnerability affecting localized versions of the Red Dead Redemption 2 video viewer on our website, e.g. www.rockstargames.com/reddeadredemption2/br/videos. This affected all major modern browsers, and could have been used for cookie or sensitive token theft. Thanks to this report we were able to identify the issue and push out a fix, preventing this attack from being exploited.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.