Lucene search
DakOBB:551184HistoryFeb 01, 2018 - 8:05 p.m.
mathematik.uni-muenchen.de XSS vulnerability
2018-02-0120:05:00
dak
www.openbugbounty.org
8
Open Bug Bounty ID: OBB-551184
| Description | Value |
|---|---|
| Affected Website: | mathematik.uni-muenchen.de |
| Vulnerable Application: | Custom Code |
| Vulnerability Type: | XSS (Cross Site Scripting) / CWE-79 |
| CVSSv3 Score: | 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
| Disclosure Standard: | Coordinated Disclosure based on ISO 29147 guidelines |
| Remediation Guide: | OWASP XSS Prevention Cheat Sheet |
Vulnerable URL:
http://www.mathematik.uni-muenchen.de/~didaktik/index.php?ordner=ufer&data;=%22%3E%3Csvg/onload=prompt(/OPENBUGBOUNTY/)%3E
Coordinated Disclosure Timeline
| Description | Value |
|---|---|
| Vulnerability Reported: | 1 February, 2018 20:05 GMT |
| Vulnerability Verified: | 1 February, 2018 20:20 GMT |
| Website Operator Notified: | 1 February, 2018 20:20 GMT |
| Vulnerability Published: | 1 February, 2018 20:20 GMT[without any technical details] |
| Vulnerability Fixed: | 4 March, 2018 12:40 GMT |
| Public Disclosure: | 4 March, 2018 12:40 GMT |