Lucene search

K
openbugbountyNowaskyOBB:925693
HistoryAug 01, 2019 - 4:28 p.m.

terra.com.br Cross Site Scripting vulnerability

2019-08-0116:28:00
Nowasky
www.openbugbounty.org
7

Open Bug Bounty ID: OBB-925693

Security Researcher Nowasky Helped patch 8 vulnerabilities
Received 0 Coordinated Disclosure badges , found a security vulnerability affectingterra.com.br
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: terra.com.br
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **Nowasky Helped patch 8 vulnerabilities
Received 0 Coordinated Disclosure badges **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: terra.com.br  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 1 August, 2019 16:28 GMT
Vulnerability Verified: 1 August, 2019 16:44 GMT
Website Operator Notified: 1 August, 2019 16:44 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 1 August, 2019 16:44 GMT
Additional notification email sent: 29 August, 2019 15:20 GMT
Vulnerability Fixed: 16 July, 2020 05:47 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 31 August, 2019 16:28 GMT