A stored cross-site scripting (XSS) vulnerability in Yahoo Mail that affects more than 300 million email accounts globally was patched earlier this month, bagging a $10,000 bug bounty for the researcher who discovered it.

The flaw allowed malicious JavaScript code to be embedded in a specially formatted email message. The code would be automatically evaluated when the message was viewed. The JavaScript could be used to then compromise the account, change its settings, and forward or send email without the user’s consent.

“Yahoo Mail displays HTML-formatted email messages after filtering any potentially malicious code,” explained Jouko Pynnönen of Klikki Oy, Finland, in an analysis. “The problem lies in this process. Certain malformed HTML code could pass the filter.”

The potential ramifications of the flaw are noteworthy: The bug affects all versions of Yahoo’s webmail, the second-largest email service worldwide. The mobile app was not affected.

“We provided Yahoo with a proof of concept email that would forward the victim user’s inbox to an external website, and an email virus which infects the Yahoo Mail account and attaches itself to all outgoing emails. The bug was fixed before any known exploits in the wild,” explained Pynnönen.

After a much-publicized “T-Shirtgate” over its bug bounty policies, Yahoo started running its program through the well-known platform, HackerOne.

HackerOne gave an update on researcher participation recently, saying that over the course of 2015, nearly 600 hackers participated in the HackerOne bounty program, submitting approximately 1,500 reports. From this, it resolved 58 valid security vulnerabilities, and awarded bounties for 38 of them. This translated to rewarding 41 unique hackers a total $41,100, with an average payout of $1,082.

Comments (73)

  1. UGQDXnHjuWfMO
    October 12, 2020

    MZHAUsgTQN

  2. qJpvrQnkclioh
    October 25, 2020

    WQzclPyDJaMs

  3. sAUahoMbtKDgj
    November 8, 2020

    OWtzSwGDbsAEZp

  4. Anita Cove
    December 8, 2020

    i like this outstanding article

  5. online
    December 10, 2020

    I am truly thankful to the holder of this web page who has shared this impressive post at at this time. Robin Horatius O’Reilly

  6. DXEnxFHoatIRJ
    December 10, 2020

    DgcGaxFfplQ

  7. Dwight
    December 11, 2020

    After I initially commented I appear to have clicked on the -Notify me when new comments
    are added- checkbox and from now on whenever a
    comment is added I recieve four emails with the same comment.
    Is there an easy method you are able to remove me from that service?
    Thanks a lot!

    Here is my blog post: treeniohjelmat.wordpress.com

  8. innowly
    December 13, 2020

    Propecia Con Receta Promma cialis online india Treack Buy Nexium From Mexico

  9. film izle 2020
    December 18, 2020

    You need to take part in a competition for among the very best blog sites on the internet. I will suggest this site! Elden Broun

  10. film
    December 20, 2020

    Thanks again for the blog.Much thanks again. Really Great. Micah Jorn

  11. film izle
    December 23, 2020

    You are a very bright person! Johana Doe

  12. ixlhTDGImYjkBRqM
    December 26, 2020

    QSofjdpmlbyaUY

  13. jak powiększyć penisa w obwodzie
    January 6, 2021

    Najlepsze środki na impotencję. Chcesz powiększyć penisa to sprawdź ranking najlepszych suplementów i środków! http://www.duzytralala.pl/

  14. suplementy na masę mięśniową
    January 6, 2021

    Bardzo podoba mi się twoja strona. Jeżeli chcesz się lepiej ze mną poznać i potrzebujesz odżywek lub suplementów diety na masę sprawdź mój blog! http://www.tradzikleczenieztys.pl

  15. jak leczyć trądzik hormonalny
    January 6, 2021

    Jak potrzebujesz jak leczyć trądzik hormonalny to sprawdź mojego bloga. Najlepsze suplementy na trądzik oraz sprawdzone leki. http://www.tradzikleczenieztys.pl

  16. créditos por internet
    January 6, 2021

    Necesita urgentemente un préstamo hipotecario o un gran préstamo de inversión, consulte nuestras listas de todas las ofertas de préstamos. http://creditosonlinetybt.es/

  17. préstamos rápidos
    January 6, 2021

    ¿Necesita un préstamo rápido por Internet o un préstamo por Internet? Consulta nuestra oferta. http://prestamosrapidostrds.es/

  18. cbd for pain
    January 6, 2021

    Needed to send you the very little word to finally thank you so much the moment again regarding the spectacular techniques you have shared on this site. This has been simply surprisingly open-handed with you to present unreservedly what most of us would’ve sold for an electronic book to help make some money on their own, precisely seeing that you might well have tried it in the event you wanted. Those tactics in addition worked to become great way to realize that someone else have the same keenness similar to my very own to realize significantly more with reference to this problem. I know there are some more pleasurable situations up front for people who scan through your website. https://nfesusmmrn.online/

  19. ed medications
    January 7, 2021

    I am just writing to make you understand what a outstanding experience my wife’s girl obtained using your web site. She noticed so many pieces, which included what it is like to possess an excellent helping nature to let other people clearly comprehend a number of advanced issues. You actually did more than her desires. I appreciate you for churning out such effective, dependable, edifying and cool guidance on that topic to Emily. https://hiedmedsout.com/

  20. purchase viagra
    January 7, 2021

    Thanks for your own work on this website. My mum take interest in setting aside time for research and it is simple to grasp why. We notice all relating to the powerful way you provide very helpful tips via your website and therefore strongly encourage response from visitors on this subject matter while our own simple princess is undoubtedly studying so much. Take pleasure in the rest of the year. Your performing a tremendous job. https://limoitnow.com/

  21. generic viagra
    January 7, 2021

    I enjoy you because of all of your effort on this blog. Debby delights in conducting internet research and it’s easy to see why. A number of us hear all about the compelling manner you create effective guides by means of the blog and boost contribution from other ones about this article and my child has been becoming educated a great deal. Enjoy the remaining portion of the new year. You’re carrying out a fabulous job. https://habebihookahbar.com/

  22. propecia price
    January 8, 2021

    Thanks for your own work on this website. My mum takes pleasure in setting aside time for research and it is simple to grasp why. We notice all relating to the powerful way you provide very important tips and hints via your website and therefore strongly encourage response from visitors on this theme while our own simple princess is without a doubt understanding so much. Take pleasure in the rest of the year. Your performing a useful job. https://harrington-service.com/

  23. cheap ABILIFY
    January 8, 2021

    I’m also commenting to let you be aware of of the cool discovery my child encountered checking your blog. She came to understand a wide variety of details, most notably how it is like to have a marvelous coaching heart to get folks easily fully grasp a variety of complicated matters. You actually did more than my desires. I appreciate you for delivering such great, dependable, edifying and also cool guidance on that topic to Evelyn. https://abilifyaripiprazoles.com/

  24. abilify aripiprazole
    January 8, 2021

    I simply needed to thank you so much once again. I am not sure the things that I would’ve made to happen without the type of secrets provided by you on such a question. It seemed to be a very frustrating issue in my opinion, however , observing the very specialised strategy you processed that made me to leap over gladness. I am just happy for this information and in addition pray you know what a great job you happen to be getting into teaching people thru your web page. More than likely you have never got to know any of us. https://abilifyaripiprazoles.com/

  25. propecia price
    January 8, 2021

    I am commenting to let you know of the fine encounter my friend’s daughter found checking the blog. She came to understand a lot of details, including how it is like to have a marvelous coaching character to get certain people completely comprehend a variety of complex issues. You actually did more than her desires. I appreciate you for coming up with such essential, dependable, edifying and cool guidance on that topic to Ethel. https://harrington-service.com/

  26. cheap aripiprazole
    January 8, 2021

    I simply wanted to thank you so much once more. I am not sure the things that I would’ve sorted out without the type of solutions revealed by you over that situation. It truly was an absolute horrifying matter in my opinion, however , spending time with the very specialised style you resolved that made me to leap over gladness. Now i’m thankful for your support and thus trust you really know what an amazing job you were putting in training the others via your webpage. Most probably you haven’t met any of us. https://abilifyaripiprazoles.com/

  27. abilify tablets
    January 8, 2021

    I precisely needed to appreciate you once again. I am not sure the things that I might have handled in the absence of the entire points provided by you on such a problem. It has been a very frightful dilemma in my circumstances, however , noticing the skilled mode you processed that made me to jump over fulfillment. I am happier for this help and in addition hope that you know what a great job you are always getting into instructing others through the use of your web blog. I know that you have never encountered all of us. https://abilifyaripiprazoles.com/

  28. abilify
    January 8, 2021

    I precisely had to appreciate you all over again. I’m not certain the things I might have done in the absence of the actual ideas documented by you directly on such field. It became a real difficult condition for me personally, but discovering a new professional form you managed it forced me to jump for delight. I’m just happier for the guidance and even have high hopes you find out what a powerful job you’re doing instructing most people through your blog. I am sure you’ve never encountered all of us. https://abilifyaripiprazoles.com/

  29. venlafaxine
    January 8, 2021

    My wife and i have been so peaceful when Michael managed to finish up his studies via the precious recommendations he obtained using your web site. It is now and again perplexing to simply happen to be making a gift of techniques which often some others might have been trying to sell. We recognize we need you to thank for this. The type of illustrations you made, the straightforward website navigation, the relationships your site make it easier to instill – it is most spectacular, and it is letting our son in addition to us reckon that this subject matter is pleasurable, which is certainly tremendously serious. Thanks for the whole lot! https://effexorvenlafaxines.com/

  30. order amitriptyline
    January 8, 2021

    Thanks for your own work on this website. My mother take interest in participating in investigations and it’s really obvious why. Most people learn all regarding the lively mode you present reliable techniques through this web site and even inspire participation from some others on the point then our favorite princess is really starting to learn a whole lot. Take advantage of the rest of the year. You are always doing a splendid job. https://elavilamitriptylines.com/

  31. amitriptyline prices
    January 8, 2021

    Thanks for your whole work on this website. My mum takes pleasure in setting aside time for research and it is simple to grasp why. We notice all relating to the powerful ways you render very useful tips and tricks via your website and therefore strongly encourage response from website visitors on this theme while our own simple princess is without a doubt understanding so much. Take pleasure in the rest of the year. Your performing a useful job. https://endepamitriptyline.com/

  32. escitalopram without a prescription
    January 8, 2021

    I’m commenting to let you be aware of of the amazing discovery my child developed browsing the blog. She came to find a good number of details, including how it is like to have a great coaching character to get a number of people clearly completely grasp a number of advanced issues. You actually did more than her desires. I appreciate you for churning out such beneficial, dependable, edifying and cool guidance on that topic to Emily. https://lexaproescitalopram.com/

  33. geodon no rx
    January 8, 2021

    My husband and i ended up being comfortable Albert could carry out his analysis because of the ideas he acquired from your blog. It’s not at all simplistic just to always be freely giving tips and hints which usually the others might have been trying to sell. We really take into account we now have you to thank for this. Those illustrations you made, the straightforward website navigation, the relationships your site make it possible to promote – it is mostly unbelievable, and it is making our son in addition to us understand this topic is satisfying, which is certainly very vital. Thanks for the whole thing! https://geodonziprasidone.com/

  34. amitriptyline online
    January 8, 2021

    Thanks for your own labor on this web site. My mother take interest in participating in research and it is simple to grasp why. My spouse and i notice all regarding the powerful way you produce valuable thoughts via your website and in addition recommend response from the others on this subject then our own princess is undoubtedly studying a whole lot. Take pleasure in the rest of the year. You have been performing a terrific job. https://endepamitriptyline.com/

  35. nortriptyline
    January 8, 2021

    I simply wanted to say thanks again. I’m not certain the things I could possibly have achieved in the absence of the concepts contributed by you about my area of interest. Entirely was a daunting circumstance for me, but coming across a expert avenue you dealt with it forced me to cry for contentment. Extremely grateful for the advice and expect you are aware of a powerful job that you are accomplishing educating many people all through a site. I’m certain you’ve never come across all of us. https://pamelornortriptyline.com/

  36. luvox buy
    January 8, 2021

    I’m just commenting to let you be aware of of the exceptional discovery my cousin’s daughter enjoyed going through your blog. She discovered lots of issues, most notably how it is like to have a very effective giving heart to have many more effortlessly fully understand certain extremely tough matters. You really did more than my desires. Many thanks for displaying the helpful, healthy, educational and also easy thoughts on the topic to Gloria. https://luvoxfluvoxamine.com/

  37. doxepin prices
    January 9, 2021

    I simply wished to thank you very much yet again. I do not know what I would have used without those tips and hints shown by you relating to this theme. This has been the traumatic setting in my view, nevertheless viewing your well-written way you treated the issue took me to weep with joy. Now i am thankful for your work as well as wish you recognize what an amazing job your are undertaking training the others with the aid of your website. Probably you haven’t met any of us. https://sinequandoxepin.com/#

  38. bupropion no rx
    January 9, 2021

    I’m commenting to make you understand what a useful experience our princess went through visiting yuor web blog. She realized too many things, with the inclusion of what it is like to possess an incredible teaching style to make the rest without problems understand various very confusing topics. You undoubtedly surpassed visitors’ expected results. Thanks for supplying those warm and friendly, trustworthy, revealing not to mention unique tips on your topic to Tanya. https://wellbutrinbupropions.com/#

  39. sinequan prices
    January 9, 2021

    I precisely needed to appreciate you once again. I am not sure the things that I might have handled in the absence of the entire pointers provided by you on such a problem. It had been a very frightening difficulty in my circumstances, however , looking at the specialized tactic you solved the issue took me to weep with happiness. Now i’m thankful for your support and thus trust you really know what an amazing job you were putting in training the mediocre ones via your webpage. Most probably you haven’t met any of us. https://sinequandoxepin.com/#

  40. seroquel online
    January 9, 2021

    I am commenting to let you know of the fabulous encounter my cousin’s daughter experienced reading your site. She even learned many issues, not to mention what it’s like to have a wonderful giving mindset to have many people just grasp chosen grueling subject areas. You really exceeded our expectations. Many thanks for distributing the informative, healthy, educational and as well as easy thoughts on the topic to Jane. https://seroquelquetiapine.com/#

  41. imipramine pills
    January 9, 2021

    My wife and i were very thankful when Raymond managed to round up his web research with the precious recommendations he was given while using the weblog. It is now and again perplexing to simply possibly be releasing tips and hints which usually the others might have been trying to sell. We really take into account we now have you to thank for this. Those illustrations you made, the straightforward website navigation, the relationships your site make it possible to promote – it is mostly unbelievable, and it is making our son in addition to us understand this topic is thrilling, which is certainly very vital. Thanks for the whole thing! https://tofranilimipramine.com/#

  42. purchase zyprexa
    January 9, 2021

    Thanks for the recommendations on credit repair on this amazing site. A few things i would tell people is always to give up the actual mentality they can buy today and pay out later. Like a society we all tend to do that for many issues. This includes getaways, furniture, and also items we would like. However, you should separate the wants out of the needs. While you’re working to raise your credit score make some sacrifices. For example it is possible to shop online to save cash or you can visit second hand retailers instead of pricey department stores regarding clothing. https://zyprexaolanzapine.com/#

  43. RqMDiLOglHaj
    January 9, 2021

    FHsfOvUJtdaPD

  44. venlafaxine prices
    January 10, 2021

    Thanks for your whole work on this website. My mum takes pleasure in setting aside time for research and it is simple to grasp why. We notice all relating to the powerful ways you provide very useful tips and tricks via your website and therefore strongly encourage response from visitors on this theme while our own simple princess is without a doubt understanding so much. Take pleasure in the rest of the year. Your performing a useful job. https://venlorz.com/#

  45. buy venlor
    January 10, 2021

    I enjoy you because of all your efforts on this site. Ellie enjoys doing internet research and it’s easy to see why. All of us hear all concerning the compelling means you deliver good information by means of the blog and as well cause contribution from other people about this concept plus my daughter is actually being taught a lot. Enjoy the remaining portion of the new year. You’re the one carrying out a glorious job. https://venlorz.com/#

  46. doxepin cheap
    January 10, 2021

    I simply wanted to thank you so much once more. I do not know what I would’ve sorted out without these strategies revealed by you over that subject. It was an absolute horrifying matter in my position, nevertheless spending time with this specialized style you resolved the issue took me to leap with happiness. I will be happy for your service and then sincerely hope you realize what an amazing job you have been providing teaching some other people using your web site. Most likely you haven’t got to know any of us. https://sinequandoxepin.com/#

  47. venlor
    January 10, 2021

    A lot of thanks for all your efforts on this site. Gloria loves engaging in investigation and it’s easy to understand why. Almost all know all concerning the dynamic means you give helpful items on the web blog and as well encourage contribution from others on that concern plus our daughter is actually discovering a lot. Have fun with the remaining portion of the new year. You’re the one conducting a good job. https://venlorz.com/#

  48. filmi full izle
    January 17, 2021

    Just wanna input that you have a very decent site, I enjoy the pattern it really stands out. Charisse Benyamin Carmita

  49. hd film izle
    January 18, 2021

    Im grateful for the post. Really thank you! Want more. Zahara Weylin Down

  50. anime
    January 21, 2021

    Well I really enjoyed reading it. This post provided by you is very constructive for accurate planning. Glennie Lyon Cralg

  51. fNhUuyqztogQm
    January 24, 2021

    gaGewHRbJ

  52. yenilmezler
    January 29, 2021

    Well I sincerely enjoyed reading it. This subject procured by you is very useful for correct planning. Keelia Vasili Keeley

  53. altyazili
    January 30, 2021

    The excerpt is fascinating, I would definitely like to read more. Delcina Gabi Shelman

  54. movies
    January 30, 2021

    My wife took her CPP and OAS at 66 and I took both at 65. Main reason was cash flow and keeping other investments intact. Also took RRIF at 67 so be less of a tax burden later. I was self employed so CPP & OAS are only guaranteed pensions we have. Kalila Desmund Velda

  55. dublaj
    January 31, 2021

    Hey Alan, I would love to join. However, I am just below your age requirement and also I play Minecraft as a gamer, not a builder. I still have passion for building and would love to join. One problem, I do not have a skill I can list or check from the boxes. I love your YouTube channel and perhaps when I am older, I might join your team. I would love to just visit your server in Minecraft and see the creations you have made because I am a huge Ghibli fan. Leesa Ralph Lesley

  56. bollywood
    January 31, 2021

    Hey there. I found your website via Google whilst searching for a related subject, your website got here up. It appears to be great. I have bookmarked it in my google bookmarks to visit then. Mamie Leonardo Pallaton

  57. altyazili
    January 31, 2021

    Im obliged for the article. Really looking forward to read more. Keep writing. Bernita Mikkel Meneau

  58. netflix
    January 31, 2021

    I truly, believe we are walking with Christ in our community, Pieter you are my shepherd, teacher, and friend guiding in my walk with Christ!!!! Gavra Renaldo Cardie

  59. altyazili
    February 1, 2021

    I seriously love your blog.. Excellent colors & theme. Sari Merle Vincelette

  60. yabanci
    February 2, 2021

    We provide good value British isles essay craftingassistance at it truly is most desirable by our specialized british tutorial amount authors for varieties of volumes and deadlines with maximum level of quality. Addy Ransell Latt

  61. access
    February 4, 2021

    This is such a beautiful table! I love all of the dried florals, and what a pretty idea to use with the napkin rings! Always inspiring, Alma! Corny Waverly Cardie

  62. altyazili
    February 6, 2021

    I have been absent for a while, but now I remember why I used to love this web site. Thank you, I will try and check back more frequently. How frequently you update your website? Katheryn Earle Cindi

  63. online
    February 7, 2021

    Goedenavond, vraag: zitter en ook 1 of meer USB aansluitingen aan de voorzijde en zo ja, waar?Groetjes Marielle Orren Jerz

  64. diziler
    February 8, 2021

    Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut Shoshanna Neal Rhine

  65. mpXTxyAQaHMLEhO
    February 8, 2021

    dTaVKOeSUgPpWF

  66. HuZhijtfAeEQnMW
    February 8, 2021

    uQaSiqLwO

  67. turkce
    February 8, 2021

    Thank you for the sensible critique. Me and my neighbor were just preparing to do some research about this. We got a grab a book from our area library but I think I learned more clear from this post. I am very glad to see such fantastic information being shared freely out there. Berti Yanaton Dari

  68. anime
    February 9, 2021

    Congratulations, great photos and video! Wish you clear skies and many thanks for all your wonderful books and online stories, pics and reports! Joyann Britt Alage

  69. dizi
    February 9, 2021

    After looking over a few of the blog articles on your website, I truly like your technique of blogging. I book-marked it to my bookmark webpage list and will be checking back soon. Take a look at my web site too and tell me your opinion. Margaret Christoph Kamerman

  70. aksiyon
    February 10, 2021

    If you are going for finest contents like myself, only go to see this website all the time because it offers feature contents, thanks Ellene Jdavie Bergquist

Comments are closed.