Valve · Report #745447
Steam chat - trade offer presentation vulnerability
Validstatus
mediumseverity
60upvotes
19 Feb 2020disclosed
Summary
It was possible to construct a Steam URL that began with "/tradeoffer/new" and included valid partner and token information, but which was in fact an external link. The crafted URL would be treated by the Steam Chat UI as a trade offer and given special visual treatment.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.