Rockstar Games · Report #508475
DOM based XSS on /GTAOnline/de/news/article via "returnUrl" parameter
Validstatus
mediumseverity
6upvotes
24 Jun 2020disclosed
Summary
In this report, the researcher identified a DOM-based cross-site scripting vulnerability affecting localized versions of the GTA Online screenshots site, e.g. https://www.rockstargames.com/GTAOnline/jp/screens/. We have pushed out an update fixing this vulnerability so that it is no longer exploitable.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.