Lucene search

K
hackerone0xmarufH1:2045549
HistoryJul 01, 2023 - 3:41 a.m.

U.S. Dept Of Defense: CVE-2023-24488 xss on https://██████/

2023-07-0103:41:40
0xmaruf
hackerone.com
22
dept of defense
cve-2023-24488
xss
malicious js
cookie stealing
bug bounty

0.055 Low

EPSS

Percentile

93.2%

Description:

References

Impact

malicios js inejction , cookie stealing

System Host(s)

█████████

Affected Product(s) and Version(s)

CVE Numbers

CVE-2023-24488

Steps to Reproduce

  1. https://█████/oauth/idp/logout?post_logout_redirect_uri=%0d%0a%0d%0a<script>alert(document.domain)</script>

Suggested Mitigation/Remediation Actions

0.055 Low

EPSS

Percentile

93.2%