midobras.com Cross Site Scripting vulnerability

2020-04-1913:22:00

MrRain_1996

www.openbugbounty.org

JSON

Open Bug Bounty ID: OBB-1147173

Security Researcher MrRain_1996 Helped patch 1003 vulnerabilities
Received 5 Coordinated Disclosure badges
Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affectingmidobras.com website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website:	midobras.com
Open Bug Bounty Program:	Create your bounty program now. It’s open and free.
Vulnerable Application:	Custom Code
Vulnerability Type:	XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score:	6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard:	Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by:	**MrRain_1996 Helped patch 1003 vulnerabilities
Received 5 Coordinated Disclosure badges
Received 9 recommendations **
Remediation Guide:	OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data:	Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: midobras.com vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported:	19 April, 2020 13:22 GMT
Vulnerability Verified:	19 April, 2020 13:35 GMT
Website Operator Notified:	19 April, 2020 13:35 GMT
a. Using the ISO 29147 guidelines
—	—
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]:	19 April, 2020 13:35 GMT
Vulnerability Fixed:	12 May, 2020 03:06 GMT
—	—
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability.	19 May, 2020 13:22 GMT
—	—

JSON