Lucene search

K
openbugbountyMetamorfosecOBB:1167753
HistoryMay 21, 2020 - 4:43 p.m.

kurhotel-zink.de Cross Site Scripting vulnerability

2020-05-2116:43:00
metamorfosec
www.openbugbounty.org
7

Open Bug Bounty ID: OBB-1167753

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: kurhotel-zink.de
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Other
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: metamorfosec
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: kurhotel-zink.de  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 21 May, 2020 16:43 GMT
Vulnerability Verified: 21 May, 2020 16:51 GMT
Website Operator Notified: 21 May, 2020 16:51 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 21 May, 2020 16:51 GMT
Vulnerability Fixed: 26 June, 2020 14:31 GMT