Reflected XSS via #tags= while using a callback in newswire http://www.rockstargames.com/newswire Analysed #153618 Valid Cross-site Scripting Medium 2017-03-16 – 26 Reflected XSS in /Videos/ via calling a callback http://www.rockstargames.com/videos/#/?lb= Analysed #151276 Valid Cross-site Scripting Medium 2017-09-25 – 27 DOM based reflected XSS in rockstargames.com/newswire/tags through cross domain ajax request Analysed #172843 Valid Cross-site Scripting Medium 2017-03-17 – 27 CSRF Vulnerability allows attackers to steal SocialClub private token. Analysed #253128 Valid Cross-Site Request Forgery High 2017-08-03 – 28 CSRF Vulnerability on post creation page /community/create-post.json Analysed #487378 Valid Cross-Site Request Forgery Low 2020-07-07 – 29 stored XSS (angular injection) in support.rockstargames.com using zendesk register form via name parameter Analysed #354262 Valid Cross-site Scripting High 2018-11-06 $1,000 31 Exploiting Misconfigured CORS to Steal User Information Analysed #317391 Valid Information Disclosure High 2018-10-17 $500 36 CSRF in 'set.php' via age causes stored XSS on 'get.php' - http://www.rockstargames.com/php/videoplayer_cache/get.php' Analysed #152013 Valid Cross-Site Request Forgery Medium 2017-03-10 – 40 DOM based XSS on /GTAOnline/tw/starterpack/ Analysed #508517 Valid Cross-site Scripting Medium 2020-06-24 – 46 DOM XSS on https://www.rockstargames.com/GTAOnline/feedback Analysed #803934 Valid Cross-site Scripting Medium 2020-06-11 – 46 full path disclosure on www.rockstargames.com via apache filename brute forcing Analysed #210238 Valid Information Disclosure Low 2019-10-04 – 48 Open Redirection effects autodiscover.rockstargames.com Analysed #1269332 Valid No weakness recorded Low 2025-02-03 – 49 Bypass CAPTCHA protection Analysed #210417 Valid Authentication Medium 2018-04-23 – 51 Brute Force against VMware Horizon Analysed #1278072 Valid Authentication Low 2021-08-16 $250 53 XSS on rockstargames.com Analysed #212700 Valid Cross-site Scripting High 2023-07-25 $500 75 Cache Poisoning DoS on updates.rockstargames.com Analysed #1219038 Valid Misconfiguration and Insecure Design Medium 2021-12-22 – 77 Open redirect vulnerability Analysed #380760 Valid Open Redirect Low 2019-04-03 $250 83 CSRF Vulnerability on https://signin.rockstargames.com/tpa/facebook/link/ Analysed #474833 Valid Cross-Site Request Forgery Medium 2020-06-12 – 104 SocialClub Account Take Over Through Import Friends feature Analysed #901728 Valid Cross-Site Request Forgery High 2021-04-01 – 116 xss on https://www.rockstargames.com/GTAOnline/jp/screens/ Analysed #507494 Valid Cross-site Scripting Medium 2020-06-12 – 159 Account Takeover using Linked Accounts due to lack of CSRF protection Analysed #463330 Valid Cross-Site Request Forgery High 2019-02-20 – 238