Lucene search

K
openbugbountyGh05tPTOBB:1040854
HistoryDec 17, 2019 - 7:40 a.m.

modules.zef.pm Cross Site Scripting vulnerability

2019-12-1707:40:00
Gh05tPT
www.openbugbounty.org
8

Open Bug Bounty ID: OBB-1040854

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: modules.zef.pm
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Gh05tPT
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Screenshot: modules.zef.pm  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 17 December, 2019 07:40 GMT
Vulnerability Verified: 17 December, 2019 07:51 GMT
Website Operator Notified: 17 December, 2019 07:51 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 17 December, 2019 07:51 GMT