Hello Daimler Truck Team! I found a reflected XSS at https://www.truck-privilege.daimlertruck.com/auth/lostLogin To make it reflected, CSRF - Cross-Site request Forgery was used together. An attacker can create a malicious website and trick the user into opening it, when the user opens it, he is automatically redirected to the Daimler Truck page running the script (XSS). In the video I do the demonstration with the name="login" parameter which is vulnerable, but I also discovered another vulnerable parameter, here below in the POC I leave the two parameters vulnerable. STEPS FOR REPRODUCTION: 1° - Create an HTML file with the following code:

poc

2° -> Open this file in the browser 3° -> Click the send button and see that the POP-UP Javascript will be executed. 1st vulnerable parameter: It is sent to: action="https://www.truck-privilege.daimlertruck.com/auth/lostLogin" 2nd vulnerable parameter: It is sent to: References: https://portswigger.net/web-security/csrf https://digi.ninja/blog/xss_through_csrf.php ## Impact IMPACT: The attacker can execute malicious script in the user's browser, which may collect information or execute malicious code in the browser.