Rockstar Games · Report #505259
Image injection on /screenshot-viewer/responsive/image ( FIX BYPASS)
Validstatus
mediumseverity
6upvotes
24 Jun 2020disclosed
Summary
In this report, the researcher identified an image injection issue in the screenshot-viewer utility on our website that could be combined with other vulnerabilities to result in sensitive token theft. We were able to quickly push out an update to resolve the image injection issue, thereby preventing this potential attack path.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.