Lucene search

K
openbugbountyBroly157OBB:1225399
HistoryJul 14, 2020 - 8:59 a.m.

haki.com Cross Site Scripting vulnerability OBB-1225399

2020-07-1408:59:00
Broly157
www.openbugbounty.org
6

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: haki.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Broly157
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 14 July, 2020 08:59 GMT
Vulnerability Verified: 14 July, 2020 09:10 GMT
Website Operator Notified: 14 July, 2020 09:10 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 14 July, 2020 09:10 GMT
Vulnerability Fixed: 15 July, 2020 05:27 GMT