Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2017/10/24 8:1 p.m.30 views

Rockstar Games: Stored XSS on profile page via Steam display name

The researcher was able to demonstrate a XSS vulnerability by using their Steam nickname as the payload vector. This was due to insufficient filtering on Linked Account name fields. We pushed out an update that replaces suspicious Linked Account names with a generic string in order to prevent...

6.2AI score
SaveExploits0
Rows per page
Query Builder