34 C
Jaipur
Tuesday, October 20, 2020

Google Maps XSS Bug – Bounty Doubled After the Original Fix had Failed

Must read

5 Best GoPro Hero 9 Black Lens Mods and Filters to Buy

GoPro Hero 9 Black is one of the finest action cameras on the market right now. It brings 5K recording, multiple shooting modes, new...

Nokia Essential Wireless Headphones E1200 with 40-Hour Battery Life Launched

First unveiled in China earlier last month, HMD Global is now set to make its latest audio accessories available in the global market.  The...

Phishing Attackers Preferred Microsoft More Than Other Brands

A new report from CheckPoint security reveals that Microsoft was the most impersonated brand by attackers trying to steal people’s account details and payment information.Usually, a...

How to install ONLYOFFICE Workspace on Ubuntu

ONLYOFFICE Workspace is a free open-source self-hosted solution for team management and collaboration which includes:ONLYOFFICE Docs - online editors for documents, spreadsheets, and presentations...

Google fixed the vulnerability with Google Maps that was reported through Google Vulnerability Reward Program (VRP) and in return, the researchers are paid with financial rewards.

The XSS vulnerability with Google Maps discovered by Zohar Shachar, Head of Application Security at Wix, and reported to Google through their bug bounty program.

XSS with Google Maps

The vulnerability resides in Google Maps that are used for creating your map. Once you have the maps created you can export them in various formats such as CSV, XLSX, KML, or GPX.

Shachar exported the map in KML format that was used to display geographic data in an Earth browser such as Google Earth.

The map name was found to be present in the CDATA tag “which means our code will not be rendered by the browser.”

According to Shachar, “by adding ‘]]>’ at the beginning of your payload (I.e. as the beginning of the ‘map name’), you can escape from the CDATA and add arbitrary XML content (which will be rendered as XML) – leading immediately to XSS.”

He also provided the steps to reproduce the issue. The bug was reported to Google and they paid 5000$ bounty.

Bypassing the Fix

To fix the closing of the CDATA tag Google added another CDATA tag, Shachar reported the issue again to Google.

“I was genuinely surprised the bypass was so simple. I reported it so quickly (literally 10 minutes between checking my mailbox and reporting a bypass), that right after sending this mail I started doubting myself.”

Within two hours, Google acknowledged the issue and reopened the case, and updated the bug.

The first XSS issue was reported to Google on April 23 & fixed on June 7, the bypass to the patch reported on the same day and the issue fixed, the second payout provided on June 18. For each vulnerability report Shachar $5,000, so the total reward is $10,000.

“Ever since this Google-maps fix bypass incident I started to always re-validate fixes, even for simple things, and it has been paying off. I full-heartedly encourage you to do the same,” Shachar said.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates

Also Read:

Lazarus APT Hackers Attack Japanese Organization Using Remote SMB Tool “SMBMAP” After Network Intrusion

PoetRAT – New Python RAT Attacking Government and Energy Sector Via Weaponized Word Documents

Source link

- Advertisement -

More articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest article

5 Best GoPro Hero 9 Black Lens Mods and Filters to Buy

GoPro Hero 9 Black is one of the finest action cameras on the market right now. It brings 5K recording, multiple shooting modes, new...

Nokia Essential Wireless Headphones E1200 with 40-Hour Battery Life Launched

First unveiled in China earlier last month, HMD Global is now set to make its latest audio accessories available in the global market.  The...

Phishing Attackers Preferred Microsoft More Than Other Brands

A new report from CheckPoint security reveals that Microsoft was the most impersonated brand by attackers trying to steal people’s account details and payment information.Usually, a...

How to install ONLYOFFICE Workspace on Ubuntu

ONLYOFFICE Workspace is a free open-source self-hosted solution for team management and collaboration which includes:ONLYOFFICE Docs - online editors for documents, spreadsheets, and presentations...

Microsoft Will No Longer Force Install Office PWAs in Windows 10

Last week, Microsoft was spotted adding progressive web apps of Word, Excel, PowerPoint, and Outlook in Windows 10 without the consent of the user....