U.S. Dept Of Defense · Report #901799
Stored XSS on ████████helpdesk
Validstatus
highseverity
2upvotes
30 Jul 2020disclosed
Summary
A Department of Defense(DoD) asset was vulnerable to Stored XSS due to a file upload feature. This may have led to Local File Inclusion. The DoD Representatives were responsive and thorough when handling my report.
A Department of Defense(DoD) asset was vulnerable to Stored XSS due to a file upload feature. This may have led to Local File Inclusion. The DoD Representatives were responsive and thorough when handling my report.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.