support.keurig.com XSS vulnerability

Open Bug Bounty ID: OBB-664924 Description| Value ---|--- Affected Website:| support.keurig.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

keurig.com XSS vulnerability

Vulnerable URL: https://www.keurig.com/search?text="-prompt'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11791 VIP website status:| Yes...

Keurig 2.0 Authentication Bypass

Overview Keurig 2.0 Coffee Maker contains a vulnerability in which the authenticity of coffee pods, known as K-Cups, uses weak verification methods, which are subject to a spoofing attack through re-use of a previously verified K-Cup. Impact CVSS Base Score: 4.9 Impact Subscore: 6.9 Exploitabilit...