地图 / HTML injection via insecure parameter [https://www.ubercarshare.com/]

HTML injection via insecure parameter [https://www.ubercarshare.com/]

跨站脚本 / Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) / #1790444

厂商: Uber
严重程度: 低危 · CVSS 4.3
赏金: —
弱点: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
研究员: @zhero_
披露日期: 2023-03-23
资产: Uber Assets
CVE: —

该报告还没有中文解读。

时间线

2022-12-02报告提交
2023-03-23公开披露

阅读 HackerOne 原文 ↗作者 @zhero_ · 版权归作者与 Uber 所有

同类报告

HTML Injection on TikTok AdsTikTok · 2024-02-20 Reflected HTML Injection via contact (faq) search parameter on ██████████Mars · 2024-11-25 Reflected HTML Injection via contact (faq) search parameter on ███]=Mars · 2024-11-25 reflected XSS on panther.comPanther Labs · 2022-07-23 HTML Injection via Email ShareTikTok · 2022-07-27 HTML Injection on Company Name on EmailTikTok · 2020-12-31 · $79

HTML injection via insecure parameter [https://www.ubercarshare.com/] · 破甲 POJIA