New Relic: Stored XSS in notes (charts) because of insecure chart data JSON generation

Hey team, I have discovered vulnerability of chart data JSON generation endpoint when the chart is displayed inside a note allowing attacker to inject arbitrary fields into it and leading to stored XSS. The impact is higher than usual here because the payload remains after publishing a note so th...

forum.highcharts.com XSS vulnerability

Open Bug Bounty ID: OBB-446580 Description| Value ---|--- Affected Website:| forum.highcharts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

highcharts.com XSS vulnerability

Open Bug Bounty ID: OBB-238908 Description| Value ---|--- Affected Website:| highcharts.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Sucuri: Usage of HTTP for exporting graph data as images

Whenever a user of waf.sucuri.net exports his reports graph data as a png, an unencrypted request is sent over to export.highcharts.com. This enables a mitm-able attacker to sniff and|or replace exported image. Also, the whole practice of offloading potentially private user data to an unrelated...