1762436 - Paylod XSS (minor) to Crash Thread Questions

Status: RESOLVED DUPLICATE of bug 1762422

(Websites :: Other, task)

Description

[Kang Ali]

Paylod XSS (minor) to Crash Thread Questions

1. Login website https://support.mozilla.org/
2. Go to https://support.mozilla.org/en-US/questions/all
3. Comment on Thread Questions with payload below

<IMG SRC="jav ascript:alert('XSS');">

4. After comment on Thread Questions, thread questions crash and alert :

An Error Occurred
Oh, no! It looks like an unexpected error occurred. We've already notified the site administrators. Please try again now, or in a few minutes.

5. This not Denial-of-service attack or Rate Limit, because this payload impact only user support.mozilla.org

Impact :

This Dangerous!!! because All Thread Question is crash and cannot Error Occurred, and user cannot access this thread.

Supporting Material/References:

Because the proof of concept video file is too big, I uploaded it on youtube and the setting not public :

https://youtu.be/mqwMNR9jx-o

Thanks

Comment 2

[Daniel Veditz [:dveditz]]

This is the same underlying sanitization code as your bug 1762422. denying the bounty request here for that reason, we are still investigating the issue in the other bug though.