Rockstar Games · Report #498358
Image Injection on /bully/anniversaryedition may lead to OAuth token theft.
Validstatus
mediumseverity
8upvotes
24 Jun 2020disclosed
Summary
In this report, the researcher identified an image injection issue on www.rockstargames.com/bully/anniversaryedition that could be combined with other vulnerabilities to result in sensitive token theft under certain conditions. We resolved the image injection issue, preventing this series of vulnerabilities from being exploitable.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.