Lucene search

K
openbugbountySecuNinjaOBB:1249103
HistoryAug 03, 2020 - 6:11 a.m.

manted.de Cross Site Scripting vulnerability OBB-1249103

2020-08-0306:11:00
SecuNinja
www.openbugbounty.org
6

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: manted.de
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: SecuNinja
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 3 August, 2020 06:11 GMT
Vulnerability Verified: 3 August, 2020 06:21 GMT
Website Operator Notified: 3 August, 2020 06:21 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 3 August, 2020 06:21 GMT
Vulnerability Fixed: 10 September, 2020 14:41 GMT