Rockstar Games · Report #803934
DOM XSS on https://www.rockstargames.com/GTAOnline/feedback
Validstatus
mediumseverity
46upvotes
11 Jun 2020disclosed
Summary
In this report, the researcher identified a DOM-based Cross-Site Scripting vulnerability in the /GTAOnline/feedback endpoint. As we worked together on resolving this matter, the researcher helped us identify other parts of the GTA Online sub-site that suffered from the same vulnerability due to code re-use. The vulnerability has now been fully resolved.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.