stj.jus.br Cross Site Scripting vulnerability OBB-2274762

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

stj.jus.br XSS vulnerability

Open Bug Bounty ID: OBB-567371 Description| Value ---|--- Affected Website:| stj.jus.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

stj.jus.br XSS vulnerability

Vulnerable URL: http://www.stj.jus.br/sites/STJ/default/ptBR/Resultado-da-Busca?vgnextkeyword=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

stj.jus.br XSS vulnerability

Vulnerable URL: http://www.stj.jus.br/webstj/processo/push/caduser.asp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.05.2016 Latest check for patch:| 31.05.2016 20:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...