Summary by National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
Please make sure you are providing only high level details and redact sensitive data and user information.
Reflected XSS and HTML Injection on cce-signin.gsfc.nasa.gov via 'popup_flag' parameter
Disclosed by ItsS4LEH- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date about 2 months ago
- Priority P4 Bugcrowd's VRT priority rating
- Status Resolved This vulnerability has been accepted and fixed
Summary by ItsS4LEH
.