Lucene search

K
openbugbountyKun-flyOBB:1196155
HistoryJun 13, 2020 - 4:06 p.m.

mazurky.com.br Cross Site Scripting vulnerability OBB-1196155

2020-06-1316:06:00
kun-fly
www.openbugbounty.org
8

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: mazurky.com.br
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: kun-fly
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 13 June, 2020 16:06 GMT
Vulnerability Verified: 15 June, 2020 08:21 GMT
Website Operator Notified: 15 June, 2020 08:21 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 15 June, 2020 08:21 GMT
Vulnerability Fixed: 15 June, 2020 09:36 GMT