U.S. Dept Of Defense: DNS Misconfiguration

2016-11-29T10:37:18
ID H1:186316
Type hackerone
Reporter atik-rahman
Modified 2016-12-22T22:37:07

Description

Multiple reporters identified a DNS configuration issue in the defense.gov domain that could allow same-site scripting. Thanks to @myst404 for first reporting this, and to @atik-rahman and others for also reporting it.