Internet Bug Bounty · Report #705420

A reflected XSS in python/Lib/DocXMLRPCServer.py

Validstatus

mediumseverity

118upvotes

19 Oct 2019disclosed

How it was found

I have report this issue to PSRT and it has been resolved now. Details about this issue is at https://bugs.python.org/issue38243 and http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935

It's the same with other xss.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original