Mobile App Wall Of Shame: ESPN ScoreCenter
ID: 85379fe7-8e1b-506f-ae4a-35b02193adda
STIX ID: report--85379fe7-8e1b-506f-ae4a-35b02193adda
Feed Name: Zscaler Security Research Blog
Threat Score
This advisory reports two security flaws in the ESPN ScoreCenter iOS app: an XSS vulnerability in embedded/mobile web content that allows JavaScript injection, and clear-text transmission of usernames/passwords during account creation. The report includes example URLs and an HTTP POST containing credentials as proof-of-concept, and notes that ESPN has applied server-side fixes.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.