LY Corporation · Report #736272
DOM-based XSS on mobile.line.me
Validstatus
highseverity
93upvotes
25 Mar 2020disclosed
Summary
The reporter found a DOM-based XSS affecting mobile.line.me, which could have resulted in an attacker gaining access to information about a user's mobile plans, usage and user details registered as part of their mobile subscription plan.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.