Lucene search

K
openbugbountyYashodarOBB:1183712
HistoryJun 04, 2020 - 12:28 p.m.

saveco-water.it Cross Site Scripting vulnerability

2020-06-0412:28:00
Yashodar
www.openbugbounty.org
5

Open Bug Bounty ID: OBB-1183712

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: saveco-water.it
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Yashodar
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: saveco-water.it  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 4 June, 2020 12:28 GMT
Vulnerability Verified: 4 June, 2020 12:43 GMT
Website Operator Notified: 4 June, 2020 12:43 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 4 June, 2020 12:43 GMT
Vulnerability Fixed: 15 July, 2020 17:34 GMT