Lucene search

K
openbugbountyMetamorfosecOBB:984646
HistoryOct 02, 2019 - 12:30 a.m.

portoftallinn.com Cross Site Scripting vulnerability

2019-10-0200:30:00
metamorfosec
www.openbugbounty.org
10

Open Bug Bounty ID: OBB-984646

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: portoftallinn.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: metamorfosec
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Cookies:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: portoftallinn.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 2 October, 2019 00:30 GMT
Vulnerability Verified: 2 October, 2019 00:45 GMT
Website Operator Notified: 2 October, 2019 00:45 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 2 October, 2019 00:45 GMT