Lucene search

K
openbugbountyDeb_securityOBB:452238
HistoryDec 11, 2017 - 9:05 p.m.

brady.eu XSS vulnerability

2017-12-1121:05:00
deb_security
www.openbugbounty.org
7
Open Bug Bounty ID: OBB-452238
Description Value
Affected Website: brady.eu
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://www.brady.eu/en-EU/products/productsearch?startingCategory=%22%3E%3Cscript%20src=https://openbugbounty.org/1.js%3E&Ntt;=bug#P0+D0+C0
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 11 December, 2017 21:05 GMT
Vulnerability Verified: 11 December, 2017 21:09 GMT
Website Operator Notified: 11 December, 2017 21:09 GMT
Vulnerability Published: 11 December, 2017 21:09 GMT[without any technical details]
Public Disclosure: 11 March, 2018 21:05 GMT