Loading HuntDB...

Dom based xss on /reddeadredemption2/br/videos

Medium
R
Rockstar Games
Submitted None

Team Summary

Official summary from Rockstar Games

In this report, the researcher identified a DOM-based XSS vulnerability affecting localized versions of the Red Dead Redemption 2 video viewer on our website, e.g. `www.rockstargames.com/reddeadredemption2/br/videos`. This affected all major modern browsers, and could have been used for cookie or sensitive token theft. Thanks to this report we were able to identify the issue and push out a fix, preventing this attack from being exploited.

Reported by netfuzzer

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Cross-site Scripting (XSS) - DOM