wismut.de Cross Site Scripting vulnerability OBB-1192517

2020-06-1114:17:00

1orzero

www.openbugbounty.org

JSON

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website:	wismut.de
Open Bug Bounty Program:	Create your bounty program now. It’s open and free.
Vulnerable Application:	Custom Code
Vulnerability Type:	XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:	6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard:	Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by:	1orzero
Remediation Guide:	OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data:	Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABfCAIAAACxwoBIAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAZqklEQVR4nO3df0wb590A8AsY4hhjwDEmMXQYZ4EsQ8xDGSUpo6yNGEUoojRNWUYbyhBhFSMMkYxkEaNso5TSjDgRQiibWMWyquqQxyaWbK4Vua6XEoocD1EXMWRcx6HUoYY41AUHv38873u69348PnCO/Oj38xf33HPP89zz3PH1nc/PbQoGgwQAAAAggIj73QAAAACPLIgxAAAAhAIxBgAAgFAgxgAAABAKxBgAAABCgRgDAABAKBBjAAAACAViDAAAAKGEiDGXL1+Oi4u7desWmfLEE0/88pe/JAji9u3bx44dS01N3bJlS0ZGxuuvv3737l1MOs25c+d27NixefPm7373u//4xz+oq2ZmZiIjI99//31aYkJCArn42WefxcbGfvzxx2TKn/70p4yMDLIurvJnZmZiY2O5Sp6ZmdlE8dhjj508eXJlZYWa/8UXXzx27Bi5+P7770dFRS0sLJApTz755NmzZ5mlIayraBVx9SG18cySN23ahK8UAAA2WjCU4uLi+vp69Pfg4KBKpfL5fMFg8ODBg6WlpXa7fW5uzmAwFBQUjIyMYNKpdDqdWq02GAxzc3MXL16Uy+Umk4lc63A4CILQaDSoIjIxPj6eWkhDQ8NLL71ELmZlZfX394cs3+FwSKVSajnUktFav9/v9/uXlpZsNltubu7p06ep+fv6+rKzs8nFlpYWgiAGBwfR4vLyslgstlqttNJIgUCAWdH4+Pi+ffvIirj6kNp4tK3dbo+PjycLx1cKAAAbLHSMsdvtEolkeno6EAikp6ej/+NLS0sikcjr9dIyc6XTqFQqo9FILnZ3d5eUlJCLDodDIpFkZ2fX1tZSE2kxxu12S6VSh8MRDAaHh4c1Gg35nxRTPp8YQ11rNpt37dpFTZmcnBSJRIuLi2hx3759WVlZdXV1ZH5MadRKaassFguqCNOH+MaHrBQAADZY6O9jMjIyampqmpub+/r6ZDLZkSNHCIJYXV0lCEIkEtEyc6VTLSwsuN3uvLw8MiU/P39iYoKaJyIi4q233urv7//Xv/7FVc727dsrKys7OzsJgujo6Ghubo6MjORZPn9isdjv91NTdu7cqVQqLRYLQRC3b98eGxv7zW9+YzAY0Fqz2Zyfn7+OiqKjo5eXlwl+fQgAAA8FXt/5t7S0GI3GU6dO6XQ6lBITE1NcXFxeXv7BBx/cuXOHzMmVTuXz+cRicVRUFJkik8kWFxdp2b797W+3trZWVVVRv+qgaW5uvnjx4l//+leHw1FZWbmm8vlYWFhobW0tLi6mpRcUFJjNZoIgrly5otVqi4qKXC7XjRs3CIIwm80FBQVrreiLL75oaWmprq4m+PUhAAA8FHjFmISEhP3798tksr1795KJAwMDmZmZVVVV8fHxO3fufPXVV9H30lzppEAgQPuQHhEREQgEmPU2NTWlpKTU19dzNSw5Obm8vLy8vLy5uZkMKvzLZ+Xz+RL/j1KplMlk6FKJiowxRqOxsLAwKiqqoKAAXcpYLBbqdQy1tMTExJ/97GfMVVu3blUoFKurqydPnkSrQvYh/12gVQoAABuKzw01m80WHx+fmZnZ29vLXOv3+y0WC/O7ca50l8slFoupKVNTUwqFglykfqMwOTkpkUj0ej3ziweybeh2Fs/yQ34fI5FIXC6Xy+Xq7+/ftm3b0tISs1L0HdXy8nJmZiZ6mkCn01VUVNhsNplMRn4tRC0NmZ+fZ11lMpmys7O7u7tpFdH6kOf3MVyVAgDABuMVYwoKCtra2q5cuaJQKLj+YY2MjKSnp/NJ93q9BEEsLy+TKWNjYxqNhlyk/Sft7u5WKpWjo6OsMYb5bxdf/tzcnEgkoj5nNT4+rlKpWEvLzMzU6XSs+6tSqfR6vUwmQxVNTEyoVKqenp7i4mJM2zCrzGYzawcGKX0I3/kDAB4uoe+V/eUvf5menm5qanryySfz8vLQo7oEQdC+KkAPyGLSSXFxcSqVCt1rQsxm8+7du7kacOzYsd27d9fV1YVsKp/yExMT5XL51atXybUmkykrK4u1qNOnT3d2dn711VfMVfn5+a2trfn5+ege3be+9a2IiIi+vr51fBmDoMiH/g7ZhwAA8HDAh6ClpSW1Wj0wMIAW0Z0rm81mt9uVSmVfX5/b7fZ6vSaTKTMzs729nSudViz5+xWPx/P2228zfx9D+yQ+PT0tlUp5XseELP/8+fPp6ekmk8nj8bz77rtyudxsNnOVtnv3btY7hL29vQRBUK9y0EMH1B8D8fx9jN/vn5iYyM/Pf+WVV4LBIKYP+V/HwO9jAAAPghAxpq2tLScnh5rS0NBQUFAQDAaHh4cLCgpkMplEIsnKyurr60MZuNJpdDqdRqOJjo7WarXDw8PUVaxho7e3l3+MwZcfDAbPnDmjVqujo6MzMzPJn0+yljYwMKBWq6l33hC73U4QxMTEBJly8eJFqVRK/W+OfkxKg750oa1SKpU1NTXkb264+pBnjOGqFAAANtimYDB4z6+NAAAAAALmxAQAACAciDEAAACEAjEGAACAUHjFGMw8+eTs8ZGRkWlpab/+9a/JWegx09qHnLqfxDqDPX5+fnztXHlos+vj20+rPWRf8X8dAK2otLS0mJiYxx9//L333qM1HrXhmWeeef3116mrLl++nJycHHIXeA5BOK9CwHcUAOBrIeRTASHnyScnqLdarTk5OW1tbcFQj+0SPKbuR1hnsA/5eBWf53fxs+uHfOx4TX3F/3UA1KI0Go3RaEQPWCsUCvIBa2ob+vr6cnNzqRvW1taiZ6DvyRCE8yoE+DUoACB0jFnTPPno146sq0g8p+6nbcIMIWvKwFom1+z6IdvPtYqrr/i/DoCrqN7eXtrrD1AbZmdnRSLR7OwsdUODwRByF3gOQTivQoAYAwAIca9srfPki8ViPr9I5zN1/8YjZ9dfH0xfrfV1AMyiqqqqzp8/z6w0KSkpNzdXr9ejxQ8//NDv9/OZa0CgIWC+CgEA8HUWIsasaZ78zz///PTp06WlpXwq5jN1/0aizq6/Pvi+WtPrAJhFRUVFpaamstZbVlZGxhi9Xl9SUoLeoxPSPR8CrlchAAC+tkLEmJDz5FMnqP/GN76hVqvb2tpoq7hmmA85dT8GrfDs7Gx8Btb57TGz6/MsgQrfV/xfB0Ar6vjx46gBO3bsYK23rKzsypUrt2/fJghCr9eXlZXx34VwhoBZBderEGg+/fTTtLS0ddcIAHiIhHjZInWiRmR1dZX6n1QikVitVoIgIiIilEol9RM0uYpcpBUeGRn51ltvabXasrIyrVa7pnbTCne5XEVFRZgMzNppeaanpxsaGs6ePUs+AManBCp8X+Xn5zc0NKysrBgMhp6eHoIgCgsLDQZDdnZ2IBCg7T61qNOnTzc0NDB3kJSamrpr167h4WGtVutyuQoLC/l3QjhDQKvCYDA0NzdfuHBhy5Yt+E1UKhW6bQgAeOSFiDHoqaGVlRXyvs3i4qJMJiMzREREoCdlmTCrSDt37mxvb6+pqRkeHl5Ls+mFM78E4lM7NU9ycrJOp6uqqiJjDJ8SqPB9lZGRER8fPzw87HQ6c3NzCYLYv39/R0fHvn378vLyaHe3qEXFxcXFxcXNzc1hghy6XeZwOIqKiqj/4sMfAolE4vf77969S7bQ5/NRW0JWceTIka6urgsXLoS84IuMjNy+fTs+DwDg0RDiXtla5+Ffh7VO3S8c5oXImoTsK/6vA0BFUT/sG41GrhcQEARRVlY2PDz8zjvv8PwyjAYzBPfqVQgAgK+pkE+eYebJD/mAL8/fl2Cm7idLW8ezy/x/H0ObXZ9P+1lX4d8pwOd1ANRuR7+PmZubGxgYkMvlFosF0wPp6enR0dFer/eeD8G6X4WAaYCf8t5SAMAjjNd7MLnmycfHGGY8I6e15z91P1naWmMMV+1ceWiz6/Oflh8h/7Fi3inA53UAVChiRUdHZ2dnU38rw9oDJ06cKCoqwuxgOEOwvlchcHUU/G4GgK8PmNsfAACAUGBOTAAAAEKBGAMAAEAoEGMAAAAIBWIMAAAAoUCMAQAAIBSIMQAAAIQCMQYAAIBQIMYAAAAQCsQYAAAAQoEYAwAAQCgQYwAAAAgFYgwAAAChQIwBAAAgFIgxAAAAhAIxBgAAgFAgxgAAABAKxBgAAABCeXBjTFpa2vXr17kWwTqE2YcwBODRc/369Z/+9KeYDCsrKz/60Y8+++yzDWvSI+YBjTH/+c9/VldXv/Od77AugnUIsw9hCMAjqbKyUq1WYzJERUVFR0c3NTVtVIseNSFizMzMTGxsLOuqhYWF1157jWsxTENDQwcOHOBavO8w3XIP8enSmZmZhIQEPqWx9mGYm6+PEL23jjK/+OKLl19+OTExMTk5+Re/+MXKysr6auTfh+E4d+5cWlpaTEzM448//t57792TMgUaiA3ojXBQT6tbt27ZbLaGhgaCIGZmZjb9f8888wzK1tDQYDAY7luLH3Lrv47xer3t7e1ci2F6wGNMamqqx+MRuhZBu3SDN38AVVZWLi8vW61Wo9FosVhaWlrud4s4nTt3rru7+w9/+IPT6Txx4kR5efkHH3xwvxv1sKKeVj6fTyKRbN68GS1KpVI/xdDQEEqXy+U+n+/+NPfhJ7rfDWBx8+bNycnJgoIC1sUHBHlcPhTC7MMHcwjC8eWXX46Njdnt9piYGIIgzpw5c/jw4TVdiItEovT0dOofwuno6BgYGPjBD35AEMRzzz3n8Xg6Ojr+9re/CVrp19PDdV4/FHhdx5w9ezYtLW3r1q0vvvjiwsICQRALCwtqtdrn823atOmPf/wjdfHMmTOxsbFvvPFGUlJSQkLCkSNHvvzyS1TOtWvXvv/978fGxiYnJz/33HMff/wxa3VDQ0OFhYVRUVG0xWefffaNN95AidevX9+8eTNqDEEQR48ePX78OD7Dzp078ZtT24Av6ujRo9SbDMz9Qnch3nzzTXR/44UXXrh169bx48cTExO3bt368ssv37lzh2DcrKDeZ6D1MLVtN27c+OEPfxgbG5uRkXHx4kUy/auvvvrJT34SGxubmpr6q1/96u7du6xdGubmXDvLuhcEQdy9e/fkyZNJSUkxMTHPP//8rVu3UDrzoMK3gSyc6+hiLZMr/5YtWz799FMUYAiCmJqaUqlUZOfExMTs2LHjd7/7Hea2T3Jy8kcffYT++PDDD8n0y5cvc21Cy8B6Orzwwgu//e1vycx79+7t7e11u915eXlkYlVV1fnz55kl37lz5+jRo4mJiY899tirr76Keo96KCYkJPz4xz8mexuDtahr167t3bt3y5YtiYmJzz///I0bN1BmriOKiWs4UPprr72WmJi4ffv23//+91zNWNOZxawIc1oRBLG6unrs2LGkpKSkpKSf//znzMOP4DG+gCZ0jPH5fFar1WKxjIyMuN3u5uZmgiDi4uLsdju6tKyoqKAuPvvssz6fb2RkZHR0dHR0dGxsrLOzExVVUlJSWVnpdDrNZnNeXp5YLGatketGWUlJCXlX9O9///vq6uqlS5fQosFgKC4uxmcoLS3Fb05tA74o9ImSmpm5X6jfzGaz1Wp1u927du3yeDw2m+3q1asOh+PUqVP4bqf1MHVVXV2dTCabmJgYHh6mntJtbW1LS0s2m+3SpUsmk6m3t5e1S8PcnOcgkjo7Ow0Gg8FgmJycVKlUExMTBMdBhW8Dievo4iqTKz/pk08+aWpq6urqIjvHbrf/85//7O/vJ/MkMnDtb2Vl5dNPP43CD821a9eefvrpyspKTE8eOnRIr9ejDDdv3rRarQUFBWKxmPzIRRBEVFRUamoqs/z6+nq32z02Nnbp0qWhoaGenh6yB2w2G+oZp9MZ8tjjKmpsbKympmZ2dnZ8fDwlJaWurg5l5jqiWDsNM3x2u318fLy/v58MqKzN4HlmsVaEOa0IglhaWpJKpePj4xaLxWAwdHd3M3sGM76AXRDL4XAQBLG4uIgWLRaLRqMhV0mlUmpOtIg2cTqdKH1wcHDPnj3BYHB+fl4kEvn9fmYtTqdTrVajv30+n1QqnZ+fZy663W6JRIJKyMnJaWxsPHz4MKpRJpMtLy/jMzidTvzm1Cbhi5qamiL3nXW/UCd4vV60aDabIyIilpaWyG785je/ydqH8fHxzC6lCgQCYrGY2r3kJgqFwufzob+tVmtOTg6zD8PcnGtnMXuhVCrHxsaYncN6UHG1gbYt8+jiKpMrP8nlcmk0mrfffhvfOS6GIAefz9fe3i6Xyw8dOjQ5OYkSJycnDx06JJfL29vb0Q5ynQ5LS0voWA0Ggz09PQcOHKB2b1NTk0KhUCgUZI+RAoGAVCqdnp5Gi0NDQ7m5ucyeMZvNXKdwyKKopqamtm3bttZOww8fedZjmsH/zOIad+peU//2+/1Xr14la9fr9eThR83GOr4AI3SM4fr3gYkxYrGYTJ+YmFAqlejv8vJyrVbb2NjY1dV15coVMk8gEHC73ejvwcHBp556ilxFW9RqtUajcXZ2NiUlxev1KpXKQCBw4cKFsrIyPhlCbk6FyUzbd+Z+hQweaHEdMcbtdtO6F20yPz9PEITi/8jlcrLbqX0Y5uZr3Vmv1ysSiQKBAHUXuPJj2kDNzHp0cZWJORqR3NxcnU6H75x1mJ+fLy0tFYlEaFEkEpWWlpL/GRGu06G8vBw1af/+/QMDAy6Xi2yV1+t1uVxXr15lNsztdkdHR5OLk5OTKAbwP4VDFjU2NrZ//36VSoVGB5Wzpk7jOXyYZvA/s7jGnSvG0NjtdrTXrNlo4wswNvQ7/z//+c8fffTR+Pi42+1ubGzct2/fuXPnCIKIjIzcvn07yoN/oqy4uNhgMExPT5eUlMTFxWm1WpPJRL3Thc8QcnMq/pmZ+7XxT9P7/f6IiIjR0VGR6H/HNCLif2+E8nkkjP/m69jZyMjIMHdBIDdv3rTZbP/+979D5mTeHPv888+5Mv/3v/9taWkxmUxtbW0opa2traur65VXXmlra9uxYwdK5DodDh06dP78+YqKipGRkcHBwdXVVb/fv7KyEhUVFRcXFxcXNzc3J5FI1rnPYSgtLa2uru7t7RWLxS6Xq6ioCJ+f2Wmjo6OCte7eW11dZU1nji/AwYeg9V3HEJSrVL1eT7s7gVit1pSUFFpiIBBQKBTk1TFtMRgMWiyWnJycAwcODA8PB4PBnp6e+vr6bdu2kZdB+AwhN6fCZMZ8/EH7xfPT1uLiYkREBPU+xlrvlen1enITqVRKuyvF2qXhbM66s/i9UCqVVquVuhWmc1jbQNuW9ejCXMdgjsZAIEDdNUzn8L9XVltbK5VKGxsbPR4PNd3j8TQ0NEil0traWuZW1NPB7/fL5fLu7m7y8lqlUlEvdLq6uoqKimglYO6VrfU6hrWoubk56sd2q9WKyllTp/EcPkwz+F/HcI0713WMwWDQarVkUYODg6z3yrjGF3BZf4zx+XwikYi8I0kuotE9ePCgy+UaHx/XarWtra3BYHBiYqKoqMhoNHo8HqfTWV1dXVJSQpaMbkybTKbMzEwykbaIKJVKpVKJ8rtcLplMRj0yQmbAr6XdH+fKTO0W1v3ieSYEg8GcnJzq6urZ2dnJycm8vDxqNmoPUxtWWlpK7V5yk9ra2tzcXPS5uLOzs62tjbUPw9mcaxAxe9He3p6Tk2Oz2VwuV11dnclkwnQOaxuou891dOFjDDM/14hzdQ5/FRUVDoeDa63D4aioqMD0JHL48GGZTPbOO++gRZ1Op9FojEbj3NzcwMCAXC63WCzMwqurqw8cOOB0OsfHx7Ozs9ENt5Axxv//oRubrEUplcqenh6v1zs5OVlaWkqWw7/TeA4fZo/WFGNYx516WjmdTup9SIVC0dLS4vF4xsbGMjMzyZuoU1NTZC348QVM648xwWCwtbVVIpH09/dTF998802pVNrR0aFUKuPj41966SX0jdzy8nJra2t6enp0dLRSqayoqJidnaXV0tTUdOrUKbJ82iJy+PDhgwcPkot79uyh5cFnwKxlHuhcmak5WfeLf4yZmpp66qmnpFLp7t27dTod7fykdimZ6HK5CgsLpVJpenp6V1cXuYnf729oaEhJSZFIJMXFxegDILMPw9mcaxAxexEIBE6cOKFQKMRicWlpqcfjwXQOaxuYHzyZRxcmxrDmZx0XsnMkEolGo6F2zj2HOR2CwaBer5dKpdSm6nQ6tVodHR2dnZ1tNBpZy/T5fDU1NQqFIiUlpbW1FUULfIxh3tjo7e3lKspkMu3Zs0csFm/btq2xsZF6vcJ6RDHxHD7MHq3pm06ucSf/cfn9frFYTH5QHh0dzcvLk0qlGo2ms7OTzP/uu+9mZWVx7RTACxFj1gFzHymk9PR06qMdtEWwDmH24YM2BGs9usI5GpkRCIQpnOEQqKL6+nrqIy1Mfr9frVZfuHDhHjXta+fB+p3/J598glkE6xBmH8IQgEdbV1eX1WrFZNi8efPAwMATTzyxYU16xDyg8y4DAMAGiIqK+t73vofPAwEmHBBjAAAACGVTMBi8320AAADwaILrGAAAAEKBGAMAAEAoEGMAAAAIBWIMAAAAoUCMAQAAIBSIMQAAAIQCMQYAAIBQIMYAAAAQCsQYAAAAQoEYAwAAQCgQYwAAAAgFYgwAAAChQIwBAAAgFIgxAAAAhAIxBgAAgFAgxgAAABAKxBgAAABCgRgDAABAKBBjAAAACAViDAAAAKFAjAEAACAUiDEAAACEAjEGAACAUCDGAAAAEMr/ADZckYeUDfHGAAAAAElFTkSuQmCC)

Screenshot: wismut.de vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported:	11 June, 2020 14:17 GMT
Vulnerability Verified:	11 June, 2020 14:30 GMT
Website Operator Notified:	11 June, 2020 14:30 GMT
a. Using the ISO 29147 guidelines
—	—
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]:	11 June, 2020 14:30 GMT

JSON