Re: Navy Federal Reflective Cross Site Scripting (XSS)

Posted by AdaptiveSecurity Consulting via Fulldisclosure on Sep 29

Good evening. Because of the nature of the software and vulnerabilities we have been very cautious about releasing too
much information so that people cannot easily create exploits. We have privately provided some examples, but we are
being very cautious and do not want to provide proof of concept or other information publicly beyond what our lawyers
advised us on already. We would like to point you to the FullDisclosure post “[FD] Navy…