Lucene search

K
openbugbountyMetamorfosecOBB:1139658
HistoryApr 12, 2020 - 4:06 p.m.

jabb.se Cross Site Scripting vulnerability

2020-04-1216:06:00
metamorfosec
www.openbugbounty.org
11

Open Bug Bounty ID: OBB-1139658

Security Researcher metamorfosec Helped patch 1983 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 32 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affectingjabb.se
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: jabb.se
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Other
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **metamorfosec Helped patch 1983 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 32 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAS8ElEQVR4nO2dfUxT1/vAr1CglvJWS0XA8eJEg8Z1zFXm1Cxzcc4QUzc10zFlSBgSVNIxRg1hhC3IsPgChpDFOWaccwkjaIw6h85V0jFfSMUOsUMGtVSHgMA6Vkvh/v44v93c3LdeWgp84fn81XPOc855nuee26f33HufzsJxHAMAAAAAD+A12QoAAAAA0xaIMQAAAICngBgDAAAAeAqIMQAAAICngBgDAAAAeAqIMQAAAICnmLoxJiYm5s6dO2zFmYmbTgAfMgJumXTu3Lmze/fuydYC8AhTNMbcvXt3dHT0hRdeYCzOTNx0AviQEXDLVCAlJSU6OnqytQA8gpMY09nZGRAQwNg0MDBw4MABtqKbnDt3buPGjWzFiYHDdo5W7l7u4KYTJt6H3K54+vTpBx98EBoaGhER8cknnwwPD7s2eGdnZ0hIiMtKjotb+Bz08T1BeMJzNbqsm8urnTxjb29vc3NzdnY2fcCKiooFCxb4+fm9+OKLFy9epEw96z+8vb1jYmI+++yzkZERShPB0aNHUZO3t/f169cpQxFLiNJ3/vz5arWaWJx0eynLr6KiIiYmxt/ff8WKFVeuXHHBM9MQnJOOjg6xWMyniUPSBRQKxeXLl9mKE4bNZmNrYrN3fP1Axk0nTLwPuV2xcePG7du3m83m1tbWVatW5eXluTZ4R0dHcHCwy0qOl1s4lgrCcwuDG6eK4W7oNi4d2T6Xl5dHR0fX19d3d3efPn1aIpFotVrKCDabzWazDQ0N6fV6hUJRVFREaSJwOByoCcOw2NhYq9VKHopYQpRhDQbDypUr8/Pz2ewl9y0vL4+Njb169WpPT09NTY1UKm1oaHDBOdOMqRhjLBZLcHCw3W5nLE4RJjjGuOmESfEhhyuGhoYiIyOJ8/zGjRvPP//8mAY3m80JCQnog0KhcE3DiXTLZMUYPkydGEMcVhzHw8PDr169SnQ5cuRIUlISx9QNDQ3x8fHcWnV0dIhEooSEhIyMDHIlJcaQu+h0usWLF7O1kvtSFK6qqiIrPGPhdT/m6NGjMTExc+bMef/99wcGBjAMGxgYiI6Otlqts2bN+uabb8jFQ4cOBQQEHDx4cO7cuSEhITt37vz333/RODdv3ly9enVAQEBERMQ777xz7949xunOnTu3bt06Hx8fSnHTpk0HDx5ElXfu3PHz80PKYBj24Ycffvzxx9wCCxcu5O5OUYO4Lr558+Yrr7wye/bs0NDQLVu2dHV1ETJffPEF3UyOegJGVzx79mzXrl0BAQFRUVGffvopuvCn+4RRDGlbVlYWExMTEhLy3nvvEdZRuo9pakbb0VwHDhwIDQ2dN2/eV199hWHYyMiIWq2eO3euv7//li1bent72RYPhmGzZ89++PChv78/Kra1tYWHh2MY1tXV9eabb/r7+y9YsODw4cMcm2ARERG3b99GH3777TdU+eOPP7LJMwo4dQujUXTzyRt3jIufcr6MVVWeunEo5r5uHGcBAcfKJGtFn5GAOKwDAwMWi2XVqlVE05o1a1paWjg8JhQKHQ4Ht1cxDPPy8jp58mR1dfVPP/3kVBjDMF9fX7vd7lSMrnBqauqxY8f4TDG9cR5jrFarXq/X6XQ3btywWCx5eXkYhgUFBbW2tqKLyuTkZHJx06ZNVqv1xo0bt27dunXrVlNTU2lpKRoqKSkpJSXFZDI1NDSsWrVKKBQyzsh2MyYpKam+vh5Vnj9/fnR09NKlS6hYX1+/YcMGbgGlUsndnc0DTU1N6enpjx8/NhgMkZGRWVlZhGdu/QfZTLZ6MoyuKCoqGhoaam5uvnTpklarraqqYvQJm5jVam1ubkZHymQy7d+/n7H7mKbmsL21tdVgMFRXV6PzqrS0tL6+vr6+3mg0hoeHo68DxsVD4f79+zk5ORqNBsOwrKyswMDA1tbWy5cvV1dXEzKhNBiPVEpKytq1a9GXFIWbN2+uXbs2JSWFXOnULYxGMZpPwLj4KefLWFXlrxuHYm7qxrYSyHCsTLJW9BnpWK1WoVBI/NDEMCwwMHBwcJBRGMOwJ0+e5OfnK5VKNgEyS5YsKSwsTE1NJf8OY+Tp06cFBQVpaWlOx6Qr7OPjExUVxUefaQ73ZQ7avhwcHERFnU4XGxtLNDHulaEuJpMJ1dfW1i5fvhzH8b6+PoFAwLg7bDKZoqOj0Wer1SoWi/v6+uhFi8UiEonQCAqFQqVSbd++Hc0YGBhot9u5BUwmE3d3uu30K+62trawsDAOM9nqybC5QiqVEttHaH+Z0SeMYpQj1dDQQBwpcvexTs1hO6EPQiaTNTU1kWs4Fg+B2WyOjY09c+YMjuMOh0MoFJJdR+xCmGnQ1UOWFhcXSySSrVu3Go1GVGk0Grdu3SqRSIqLi8m78HzcQjeK0Xynix+nLSf+qvLXjUMx93UjQ14J5I4cK5OyWtj2yhgFEO3t7eQbb2hYqVQqlUolEolQKMzIyEBeIjchsrKyKMM6HI7ExMQdO3bgtL0y8rBeXl7r16/n0IroS27KyclBI9AX/AxkbPdjODYuyaeZUCgk6ltaWmQyGfr87rvvyuVylUql0WiuXbtGyDgcDovFgj7X1ta+/vrrRBOlKJfLr169+vjx48jIyP7+fplM5nA4jh8//vbbb/MRcNqd0fampqY33ngjPDwcLTtiSTGayWE+Gbor+vr6yCeGRCIhOpKdwCbGcaQoPhzT1Gy2U860/v5+gUCAbqvSHUhXiSAxMbG8vBx9tlgsFNe5djO/r69PqVQKBAJUFAgESqWyv7+fIubULYxG0e3C+S1+xm9Snqry1I1DMfd1c7oSeK5MRsXoAmazmawtjuNtbW1SqZQ8gkgkQj84LBYL2RXkJgQR4chzGY1GkUhUV1dH+Voj99VqtQkJCUeOHOHwMOpLVri/v99sNjc2NrrzNMq0QeDp6yQy33333e3btw0Gg8ViUalUK1eurKiowDDM29t73rx5SIb7qeUNGzbU19e3t7cnJSUFBQXJ5XKtVkve6eIWcNqdEaVSmZaWVlVVJRQKzWbz+vXrPeGK/fv3e3l53bp1SyD4/4Pi5eVFd4LNZmMTY4PiwzFNPSbbvb29x+SER48eNTc3//rrr04l6ZtjT548YZR88OBBQUGBVqstKipCNUVFRRqNJjMzs6ioaMGCBYSkU7d8/vnnLhjFH/6qTgXdnK4EF1YmB2gnbXh4mNh9GhwcDAwMJMt4eXlFREQwdudoIli4cGFxcXF6evqFCxfY+kZERJSXl6empu7btw/DMLQRMjIyQnjearWKRCKKwkFBQUFBQd3d3ahppsMdgly7jsFIl+R1dXX0zSIcx/V6fWRkJKXS4XBIpdL29nbGIo7jOp1OoVBs3LjxwoULOI5XVlbu3bs3LCyMuAziFnDanW57d3c38VMOqU38gmM0k6f5jK4Qi8X0nRm6ExjF2I4UvTv/qTlsp//wlMlker2ej0pk08iKUfbK6urqxrpXlpGRIRaLVSpVT08Pub6npyc7O1ssFhNPE/F0C90oRvP5LH5KL/6q8tfN6XWMy7rxXAl8ViajYoyPgVEe0yovL+d+rsy1ptdeey0xMZHjubLGxkbylpdMJiM/kVxZWUlspoWHh5O3ZzQaDXmfbcbieoyxWq0CgYDYriWKaClv3rzZbDYbDAa5XF5YWIjjeEtLy/r169HD4yaTKS0tjbxi0EaqVqtdunQpUUkpImQymUwmQ/JmszkwMFAul/MX4G4l73oTtstkssrKyv7+fqPRqFQqyTGGbiZbPXlwNldkZGQkJiain6ulpaXoYX+6ExjF2I4UpfuYpuawnX4OFxcXKxSK5uZms9mclZWl1Wr57JVRbjMolUqy68a61ZCcnNzR0cHW2tHRkZycjD7zdAvdKEbzKTGG8ehTzhf+qvLXjU+McVk3xpUwODgoEAhaW1vRVhWflUmf0WQyUbbFEMT7MT09PWfOnGF8P4bNexzvx9Bv84jFYsb3Y2w2W0tLy5o1azIzMwn5Y8eOxcXFabVa9BKMRCIhQg7xfkx3d/epU6ckEolOp2PUcEbheozBcbywsFAkElVXV5OLZWVlYrG4pKREJpMFBwfv2LFjaGgIx3G73V5YWBgXF+fr6yuTyZKTkx8/fkyZJScnZ//+/cT4lCJi+/btmzdvJorLly+nyHALcLSyXZlptdrly5cLhcKwsDCVSkX+ni0tLaWYyV2PRmZzhc1my87OjoyMFIlEGzZsQL+y6U5gFGM7UpTuY5qa23bKcXE4HLm5uVKpVCgUKpXKnp4epzGGXmM2m9etWycSiWJjYzUajee2s3m6hW4U7izGMC5+BOV84Ql/3ZzGGHd0Y1wJOI7n5eURHfmsTPqMNptNKBQyPlyAvrV9fX3lcjnae2A0jQKKphTQPRXGXlVVVZR7/gQymSw9PZ14bgVx6NCh6OhoX1/fpUuX1tbWUhRGTQkJCeSLsJmMkxjjAhzH3ilxcXGNjY1sxQnGHUPGETedMLk+dAfG657xwkNumSJrhpGprNvevXvJz18A04kJvefvlPv373MUZyZuOgF8yAi4ZUqh0Wj0ev1kawF4hCmad9k1hoeHt23b9tdff/GU50jqPjw8rNPpIiMjx087AACY8fHxefnllydbC8AjTKsY4+Pj4+vrm5OTw0eYO6l7enp6VlZWcXHxuCoIAAAws3AeY7iTXdOTb0dFRf3999+YszzYTpNs07Nzz5o1KyAggJzl7Ntvv120aNGff/5JTJSdnU0kjOGGO6n7119/3dvbu2nTJu5BPJ07fSYTFRX19OnTydZibBCLfwoylXUDpjG8rmPEpGTXKBMRejOroqLi0KFDX375pdlszs3NTU5OpsQMbkZHR1NSUv755x/GVjRja2trcHAw8ShhWlpaSUkJIVNaWoreHyRqJBKJ1WrlM/u4/HFIVFRUT0+PU7H+/n64JAIAYAbCd6/Mz8/Pz89v9uzZS5Ys0Wg0NTU1GIaVlJScOHFi7dq1oaGh27ZtKygoYMz/yIZIJAoODmbb2kIzovR/fv+Rm5tbW1vb2dmJYdjFixetVmtycrJAIIiLi+M/L4Zhjx49MhqNr7322ph6senp/iAAAADTElfux6Bk1y4k36bOPcYk2xiGzZs3LyUlBUWykpKSvLw8b29vIh84N+SM5U6TumMey53uNKk7AADAtGHMMYZIdj3W5NuM8E+yTZCXl3f69OmzZ892dHRQUrWzQU+W7jSpO+ax3OkcSd0BAACmG07foGFLds2YlYGSfJvjP+OIVrYk2/QuBBkZGUKhsLKyklFb8qSMydL5JHXHPZY73WnidAAAgGkDr+sYkUik1+v1en1zc/O1a9e6u7uPHj2KUouTxUZHR4mUq/zx9vY+efJkTU3N2bNneXbJzMzEMCw1NdWpZHx8vN1ub29vV6vVxL8uXr58WaFQoAfYQkJCNm/enJiY+NFHH5WVlf3yyy9IZmBgoK+vb9myZZQBxWIxx58zCoXC+fPno8+LFy82mUx0GX9/f7Va3dbWZrfb4+PjnVsLAADwPwuvGIOSXSNWr15dXl5eWVlJ5LImxCjJt4k82EQNkQebApFkm88zWhiGBQYGCgQCPjfbi4qKtFptZmbmgwcPiEp6Uvfjx48vW7bMbrerVKo9e/YQTR7Knf7gwQOUxJBInA4AADAtceWeP7qCCQoKCg8Pb2hoIOobGhrIP8xDQ0MlEkljYyNRo9Vq6VcGiH379sXHxzP+gas7qNVqo9Eok8nkcvnu3bsxDBsZGTl//jzlqeWXXnpp586darX6xIkTdXV1GIYFBQVJJBK2LABs2Gy2hw8fos9Go/G5556jy+zevVsul4eFhRmNRrVa7aJhAAAA/wvwjTHP/uPevXu5ubnoH4ry8vJSU1OvXLnS29v7/fffFxYW5ubmknsVFBSkpqZev369t7f3hx9+yM/Pz8/PZ5vixIkTBoPBHWMwDHM4HJT9ujlz5hw+fNhgMKD3ZnQ6XVhYWExMDGq9d+/eW2+99fPPP/f29j58+PDYsWNyuRw1ZWdnp6en3717t6ura8+ePTxf/VGpVF1dXb///nthYWFSUhKqlEqlNpvtjz/+wDDMarUaDIaysrI5c+a4aSwAAMBUx+kdG+5k1xzJtxFsebCdJtkmxOj3/DkyyNbU1CxbtozDHJ5J3fEJz50OAAAw/ZiF4/gkRbfx59mzZ4sXL87Pz9+1axebzKJFi06ePLlixYpxn72zs3Pp0qWQrgMAAIBgauX2dxM/P79Tp069+uqrHDKQ1B0AAGDCmFZ5lzEM4w4wAAAAwEQy3WIMAAAAMHWYVvdjAAAAgCkFXMcAAAAAngJiDAAAAOApIMYAAAAAngJiDAAAAOApIMYAAAAAngJiDAAAAOApIMYAAAAAngJiDAAAAOApIMYAAAAAngJiDAAAAOApIMYAAAAAngJiDAAAAOApIMYAAAAAngJiDAAAAOApIMYAAAAAnuL/AGIkH+UnxBcgAAAAAElFTkSuQmCC)

Cookies:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: jabb.se  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 12 April, 2020 16:06 GMT
Vulnerability Verified: 12 April, 2020 16:15 GMT
Website Operator Notified: 12 April, 2020 16:15 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 12 April, 2020 16:15 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 11 July, 2020 16:06 GMT