Angular Expression Injection in the my.gmc.com Search Page
G
General Motors
Submitted None
Team Summary
Official summary from General Motors
My GMC website contained a parameter that allowed XSS injection. The vulnerable input parameter has been identified and remediated.
Actions:
Reported by
signalchaos
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Information Disclosure