Lucene search

K
openbugbountyYashodarOBB:1193533
HistoryJun 12, 2020 - 9:09 a.m.

press.asendia.com Cross Site Scripting vulnerability OBB-1193533

2020-06-1209:09:00
Yashodar
www.openbugbounty.org
4

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: press.asendia.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Yashodar
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAARQ0lEQVR4nO2dfUxb1RvH75oGSinlvQ7W8eYEshAkSghMxnAh21IJdowxgjgwEmYWRCRsQZiIzG1scyYiI4RM3YiZxmyEELKgQTSIhOBklVRWCWGAUOoEBFZqh8D9/XHczf3dl9PbN1625/PXfTn3Oc95zrk89Jz2e7aQJEkAAAAAgBMQrbcDAAAAwGML5BgAAADAWUCOAQAAAJwF5BgAAADAWUCOAQAAAJwF5BgAAADAWUCOAQAAAJwF5BgAAADAWVjOMWNjYx4eHuzrb7/9tpub27Vr15zg1X/1ent722mB03MHwlcF/TrfMUEQ8/Pz586dc6qHGxaresfOuNk8Eta9g+gOOHw8r8ELQmDHv81erY3ngEOw8XPMzMxMbW1tb29vTk6OYx16PAgODp6enrZ4fW5u7uzZs2vo12bFzrjxdYdF1r2D1t0Bx2JzRzjJDrAGiG17zGg0SqXSZ5991rHePE64urpadR3AY2fcIOwbBEd1BHToZsGWzzEzMzMhISFGo3HLli1ormxxcfHYsWP+/v7bt29///33V1ZWGB9m6RNf6NalS5dCQ0O9vb1feeWV+fl5dGtycnL//v0eHh4RERHXr19nV33kyJEzZ85QpwkJCR999BFfRXQwlT58+PD111/38PAIDg5+7733VlZWqPLnzp3z9/cPCAj49NNPCYL4+eefExIS3Nzc/P39Dx8+PDk5iSycP3/+qaee8vb2zs3N/eeffwhhc2jz8/NUGI8ePbp//36qWEVFRW5uLuNZviBzNori8uXLnJbZ1thuU8HkjAbFwYMHL168iI5//fVXV1dXyo1jx46dOHGCM8J8oUNx3r17t4eHx7Zt2w4dOnT37l2+uF27dg1jnBF2zJjkrJRREb4vqFouXrzIbhFmjGG6j9OBjz/+ODQ01NfX99VXX6WXtxgH4aOXr4Hstw95JaQL6B1BP8aP3t9++83X1/fHH3/ksyPECLC+2JJjfH19dTqdTCYzm81orqyoqEiv1/f397e3t7e2ttbX1+MtGI3GgYGBnp6evr6+8fHx8vJydL2wsFAulw8ODt66dYszx2RmZra0tKDjqakpjUazb98+gW7zVVpdXW0ymQYGBtrb27u6uhoaGqjyOp1Oq9VevXo1MTGRIIj+/v6CggKDwaDVapVKZWFhISp2+xH9/f0XLlwQ6I+npycVxjNnznR1dT148ADdam1tTU9PZ5TnDDJfoyjUajWnZRu6jBENitTU1I6ODnTc1ta2urra3t6OTjs6OlQqFSbCnKFLTU3Ny8sbHx/v7u5OTEyUSCR8ccvJyeEzbi3sShkV0QvzRc9oNPb19bFbhIkApvvYDhiNRo1Gg8rr9fqysjKqsMU4WDV6ORvIfvvUarWQqvnAN39+fj49Pb2mpmb37t02GwHWH9ISo6OjMpkMc3F5eVkmk42MjKDT1tbW+Ph4xlOjo6NeXl7UMUEQCwsL6LS7uzssLAzZkUgk4+Pj6HpzczP1CIXJZJLL5ahMfX19WloaviLqFl+lJEn6+fkZjUZ0rNFo4uLiqPKzs7N8YRkeHt66dSsqRvc5NjaWXTXnMeM0Pj7+xo0b1EWz2Uyvji/IfI2iw7bMaY3TPRRMfDT0er1UKkUOx8XFlZSUZGdno6fkcvnS0hImwuzQzc7OisViRvMxceM0zgCVxwwVzkrZ9SIw0eNsEZ+TQroPM4Z7enro5YXEgQI/evkayH77hFSNeRc4m0+VUalUx48f5/SfKiPwFQDWERvXY+jcv39/aWkpNDQUnUZGRqKOxyCTyaiPzEqlcnZ2FtkhCGL79u2UHfaDbm5uKpWqpaXlzTffbG5uzsvLE+4nZ6V///339PR0SEgIur66uioWi6nyjGm3O3funDx5cnBwcGlpaXV1dXV1lSAIiURC93l8fFy4S3TUanVbW9uhQ4fa2tpUKhVjupkvyJyNsmh5amrKhi7j+5pfQEBAeHh4T0/Pzp079Xp9ZWVleHj4yspKR0dHSkqK0WjkizBn6Ly9vTMyMuLj4/fu3RsYGBgbG7tnzx4+rzDdZxVWVYoZ8Jwtwo8xi91Hh14+MDCQKi8kDsJHL18DOd8+e7oA0/yKior29vYrV67YYwTYCDggx6wxmZmZdXV1OTk5fX19zc3Ndg4ps9ksEolu375NvRgiEe/8oVqtzs/Pb2hokEgkExMTBw4csKdqBunp6WgOqq2tzarcuY6WKVQqVUdHx8jISGpqqqenZ0xMTFdXF5oosyrCiC+//PKXX37RarV6vb6kpGTXrl2lpaWcJW0wLrzSTz75xDZTznPSniocMnoZb5/Aqq3FZDI1Nzd/9dVXhYWF6enpnp6edhoE1hEHjHWFQuHi4nLv3j10qtPpQkJCfHx8TCYTtQwwMTEhxA5BEH/88Qc6HRoa4iymUqk0Gk1TU1NKSoqHh4cNFdEJCAiQSqWzs7PbHhEQEMBZ8q+//tLr9e++++7TTz+9bds2apHAbDbTfQ4KCrLKAYpnnnlGoVB89913vb29KpWKcZczyDZb5rNmczDRkkxra2taWhpBEGq1uqWl5YcfflCpVJgIY0L3/PPP5+bmvvPOO5999hm1BsBGePcJaZ3ASjF9wdkiq5y0DYtVWDV6MQ1kvH1Oap1IJGpubj58+HBcXNypU6fstAasMxZn0yyux5AkmZ+fn5aWNj4+rtVqn3vuudraWpIk4+Li8vPzDQbD0NBQYmIi5zIJ+f/T4mq1OiMjY2JiQqvVxsTEsNdjENnZ2XK5/Ouvv0anfBUtLCyIxWKdTre8vIyp9I033oiPj0f/wF64cKG6upqv1QqFor6+fm5ubmhoSK1We3l5oTkEus9VVVWMxzFuGI1GsVg8NDSETisrK6Ojo1NTUzlbzQ4yplEM2JY5u4wvmJzRYAdHoVCgJY2JiQm5XB4TE4OPMGfoBgcHDxw40NnZOT09PT4+np+fn5qaiokbp3EG1ON8Q4WzUnYH4aPH1yJMBCx2H90BfHmLcRA+evkaiGC8fRar5hv/mMU/6rpOp5NIJAMDA4y20NdjBL4CwHrhmBxjNBoLCgr8/PyUSmVVVdXy8jJJksPDw3v37pXJZDt37qytrRWSYyYmJvbt2yeTycLDwz/88EO+4dLS0iKTyUwmEzrlq4gkybKyMqlUevXqVUylZrO5uLhYqVRKpVKVSoWWOjlb3dXVFRsbK5FItm7dWlJSgt5SmUx24cIFhULh5eV19OhR5BXjcT43SJKsqqpCt0iS1Gg0BEGgYzbsIAt/wdiWObuML5hCckx2dnZGRgZ1GhsbW15ejo4xEWaHbmlpqaqqKjw83MXFRaFQ5OTkGAwGTNw4jTOgHucbKpyVMirC9wVVS01NDaNF+AjQneTsPsoBfHmLcRA+evkaiGC8fUKq5hz/QnIMSZJFRUVJSUkMg5BjNhFbSJJcr49QAIPFxUU/Pz+9Xm+niM5aWt4UjI2NRUVFUbNkm7oWANhcgCbmBuLbb79NTEx0RhpwnmUAAAAMkGM2CvPz83V1dZmZmZvI8qbg33//7enpUSqV6+0IADyJQI7ZKFBz4pvI8qagoKCgsLDwcVKWBIBNxFrnGIGi90KgNhewWejb2dsT4GHoZT18+PDmzZvOUPrjs8wQfWJftxNOYfxvvvnG09NzZmaGuvLCCy9UVFQQBPHgwYO33norODjYzc0tIiLi/PnzlPIV5pZFPv/885mZmYMHD9rfIjzBwcGwGAMATNb+awaUYgfmSyYWmZ6eFolEGo0GfeOFrQJirYW1ZyN8BwbFDaPUYg98dlQqVVFRETpubm4ODAxESiQZGRlqtVqn092/f7+joyM5Obmvrw8Vw9wCAGAjsw45hsKeHGP/30FH/SW1x4F1zzGINc4xOp1OKpWOjIwsLy+Hh4ejrwWbTCaxWDw3N8cuj7kFAMAGx8JcGV06293d/ciRIzMzMydOnPD39/f19X3ttdcWFxdRSU4x8C3/DyF4HoZPhxzB2FyAMefDkKDnFB5nWOB0/t69e+7u7nfu3EHlvb29v//+e4t+4sXG8ZsXCNfhx8vUIyxK7ls7JzY1NfXSSy95eHiEhoZeunSJqpEzwhhh/IiIiIKCgrKyssbGRrlcjtqI5LM4pa4wt+gR4NPVt1aHn9My/ZS+34EQCwDwJGN5PQbJiXd3d2s0Gr1eHxkZOT09PTAw0NvbOzo6Silpc4qBmx9x8uTJrKws4W5x6pBTsDcXoHvLkKDnFB5nWOB0PjQ0tLy8vLi4mCCIyspKlUr14osvCvETIzaO37zAUTr8CIuS+0KM0CksLHRxcRkeHu7o6GhqaqKuc0YYI4xPEERlZWVnZ2d5eXltbS264u7urlKpsrKyfvrpJ+ofF4u36PDp6lurwy8c+y0AwOMP/mMOUpugpim6u7tFIhH1E9+enp4dO3aQ/GLgCK1WGxQUND09TQoWvaeDdMjZjrGf5ZSg5xMep57COL+0tBQZGVlVVeXn50f98JsPul46p9i4kM0LBOrwC/l5s0XJfcyPpTkF7SUSCeUG3XmLEeYkKysrKCiIfmVhYaGsrCw8PFwsFu/YsYP+83LMLaouwhqZeowOPwP8fgdCLADAk4zlHIP5W0ad6vV6FxcX6vrQ0BA9K+zataulpYVtEJNj+vv7U1JSAgMD/fz8fHx82H9A+XIM448aUmX2e4SPj49CoWA8hXcefRSg6zXRYfuJiZher5dIJNStwcFBdrtqamry8vJIkkS/aOFzT6CERkxMTGdnp8FgUCqVc3NzCoVieXn5ypUr6enpmLhx5gaGG5TzQiLMZmBgwMvLKyoqqqGhgX3XbDb39PTEx8efOnVK4K3R0VFGbJEbfJ3LV54kST8anMGhcgyfBQAAKJyu7X/58uWwsLCXX37ZqqccpaJvv/C4wWAQiUQGg8GpflI4VocfI7lvp2UK2yJcVFRUUlKSlJSUkZGRmZnJWExydXVNSEiora3Nyck5ffq0wFuOAmm7AQDgEBzz+xg+MfDJycm6ujpqzl0gfDrkNiBEeByjZD4/P19aWnr9+vWGhoa7d+/a6aeQzQsE6vALFOHHSO7jXeV0XiQSjY2NUW6gAxuk3W/evDkyMlJaWrpnz57ExMTKykp0nbHWguYJLd6iX7RKpp5vZ4FtNAjsjgCO2tYBAB5n8B9zBM6VkTxi4Onp6Tdu3KBW/hkG6aLf9GOSS4cc4xhmrozkFx6nF+ZTMj9+/DiasPrggw+Sk5PZ8eHUS8dETMjmBQJ1+Plk6tke8knuU64ygs84pUA/UhkdHdVqtdHR0fjNEUgeYXyTyRQSEvLFF1+g06GhIalUOjAwoNPpFApFY2OjXq+fm5vr6uqKioo6e/YsSZKYW/Q4E9bI1GPKs+Hb70C4BQB4YnFYjuEUA2fnMz7Re8YxW4cc4xg+x/AJj9MLczp/+/ZtmUyGFnXNZnNISEhTUxPDOJ9eOl/EhGxeIFCHH7OjAR2M5D7dVXrw2acIg8GQmpoqk8lCQkJqamrwmyMg2ML41dXVjP3ei4uLUf6+detWcnKyXC6XSqXR0dGNjY1UGcwtels4dfWt1eFng9nvQKAFAHhiAW3/Dcem0OH//fffk5KS/vzzz/V25D+s1dW3X4cflPwBQAigibnh2BQ6/BqNJiwsbL29AABgo+P075UBVoF0+K36veqacfr06cDAwLS0tJGRkfLycmqtHgAAgA/4HLOx2Mg6/MnJyfX19UqlEikjIA0YAAAADLAeAwAAADgL+BwDAAAAOAvIMQAAAICzgBwDAAAAOAvIMQAAAICzgBwDAAAAOAvIMQAAAICzgBwDAAAAOAvIMQAAAICzgBwDAAAAOAvIMQAAAICzgBwDAAAAOAvIMQAAAICzgBwDAAAAOAvIMQAAAICzgBwDAAAAOIv/AZ+OWy7CeFrlAAAAAElFTkSuQmCC)

Screenshot: press.asendia.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 12 June, 2020 09:09 GMT
Vulnerability Verified: 12 June, 2020 09:17 GMT
Website Operator Notified: 12 June, 2020 09:17 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 12 June, 2020 09:17 GMT