Lucene search

K
openbugbountyHowardpottsOBB:1066321
HistoryJan 12, 2020 - 4:22 p.m.

tscnormandie.com Cross Site Scripting vulnerability

2020-01-1216:22:00
howardpotts
www.openbugbounty.org
8

Security Researcher howardpotts Helped patch 160 vulnerabilities
Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affectingtscnormandie.com
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: tscnormandie.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **howardpotts Helped patch 160 vulnerabilities
Received 3 Coordinated Disclosure badges **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: tscnormandie.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 12 January, 2020 16:22 GMT
Vulnerability Verified: 12 January, 2020 16:35 GMT
Website Operator Notified: 12 January, 2020 16:35 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 12 January, 2020 16:35 GMT
Vulnerability Fixed: 24 May, 2020 07:58 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 11 February, 2020 16:22 GMT