HexBrain

Rockstar Games · Report #663312

Warehouse dom based xss may lead to Social Club Account Taker Over.

Validstatus
highseverity
13upvotes
11 Jun 2020disclosed

Summary

The researcher brought our attention to a DOM-based Cross-Site Scripting vulnerability. Although issues on rockstarwarehouse.com are typically out of scope, this had an explicit impact on Social Club account security, so we decided we needed to act. The vulnerability only affected Internet Explorer and Edge browser users, but with the researcher's help we were able to work with our partners at Rockstar Warehouse and resolve the vulnerability.

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original