Lucene search

K
openbugbountyGh05tPTOBB:1027841
HistoryDec 01, 2019 - 5:58 p.m.

library.gpntb.ru Cross Site Scripting vulnerability

2019-12-0117:58:00
Gh05tPT
www.openbugbounty.org
10

Open Bug Bounty ID: OBB-1027841

Security Researcher Gh05tPT Helped patch 6878 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affectinglibrary.gpntb.ru
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: library.gpntb.ru
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **Gh05tPT Helped patch 6878 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 1 December, 2019 17:58 GMT
Vulnerability Verified: 2 December, 2019 04:44 GMT
Website Operator Notified: 2 December, 2019 04:44 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 2 December, 2019 04:44 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 29 February, 2020 17:58 GMT