logo
DATABASE RESOURCES PRICING ABOUT US

indifood.co.kr Cross Site Scripting vulnerability OBB-1356695

Description

Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[indifood.co.kr](<http://indifood.co.kr>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **devl00p ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, 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) --- **Mirror:** [Click here to view the mirror](<http://1356695.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 22 September, 2020 17:00 GMT ---|--- Vulnerability Verified:| 24 September, 2020 11:21 GMT Website Operator Notified:| 24 September, 2020 11:21 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 24 September, 2020 11:21 GMT Vulnerability Fixed:| 25 September, 2020 03:00 GMT ---|---