logo
DATABASE RESOURCES PRICING ABOUT US

sso1.insuedthueringen.de Cross Site Scripting vulnerability OBB-1266231

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[sso1.insuedthueringen.de](<https://sso1.insuedthueringen.de>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **H_chabik ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- **Screenshot:** ![sso1.insuedthueringen.de vulnerability](/twimages/screen-1266231.jpg) **Mirror:** [Click here to view the mirror](<http://1266231.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 19 August, 2020 22:31 GMT ---|--- Vulnerability Verified:| 19 August, 2020 22:44 GMT Website Operator Notified:| 19 August, 2020 22:44 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 19 August, 2020 22:44 GMT Vulnerability Fixed:| 18 September, 2020 02:20 GMT ---|---