Rockstar Games · Report #663312
Warehouse dom based xss may lead to Social Club Account Taker Over.
Validstatus
highseverity
13upvotes
11 Jun 2020disclosed
Summary
The researcher brought our attention to a DOM-based Cross-Site Scripting vulnerability. Although issues on rockstarwarehouse.com are typically out of scope, this had an explicit impact on Social Club account security, so we decided we needed to act. The vulnerability only affected Internet Explorer and Edge browser users, but with the researcher's help we were able to work with our partners at Rockstar Warehouse and resolve the vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.