GHSA-79GP-Q4WV-33FR Cross-Site Request Forgery (CSRF) in strawberry-graphql

Impact Multipart file upload support as defined in the GraphQL multipart request specification was enabled by default in all Strawberry HTTP view integrations. This made all Strawberry HTTP view integrations vulnerable to CSRF attacks if users did not explicitly enable CSRF preventing security...

graingerhomeimprovements.com Cross Site Scripting vulnerability OBB-3917299

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

complyplus.grainger.com Cross Site Scripting vulnerability OBB-3836222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

search.grainger.illinois.edu XSS vulnerability

Open Bug Bounty ID: OBB-564472 Description| Value ---|--- Affected Website:| search.grainger.illinois.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

search.grainger.uiuc.edu XSS vulnerability

Vulnerable URL: http://search.grainger.uiuc.edu/discovery/splitsearch.asp?searcharg=%27%22%3E%3CSvG+onload%3Dalert%28%27OPENBUGBOUNTY%27%29%3E=gen=keyword&s2;=direct=gateway=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS...