2017-011: XSS Reflected found in the Microsoft app Source
2017-011: XSS Reflected found in the Microsoft app Source
Original release date: 28, 07 2017 Last revised: July 28, 2017 Severity: 4.3CVSSv2/(AV:N/AC:M/Au:N/C:P/I:N/A:N)
BACKGROUND
Microsoft Corporation is an American multinational technology company headquartered in Redmond, Washington. It develops, manufactures, licenses, supports and sells computer software, consumer electronics, personal computers, and services.
DESCRIPTION
These vulnerabilities allows the execution of arbitrary HTML/script code to be executed in the context of the victim user's browser.
An attacker can execute arbitrary HTML or script code in a targeted user's browser, this can leverage to steal sensitive information as user credentials, personal data, etc.
The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.
ABOUT
Internet Security Auditors is a Spain and Colombia based company leader in web application testing, network security, penetration testing, security compliance implementation and assessing. Our clients include some of the largest companies in areas such as finance, telecommunications, insurance, ITC, etc. We are vendor independent provider with a deep expertise since 2001. Our efforts in R&D include vulnerability research, open security project collaboration and whitepapers, presentations and security events participation and promotion. For further information regarding our security services, contact us.
