Issue metadata
Sign in to add a comment
|
Security: Google Doodle Champions Trophy highest score can be changed
Reported by
niro.nir...@gmail.com,
Jun 3 2017
|
||||||||||||||||||
Issue descriptionVULNERABILITY DETAILS Google Doodle Champions Trophy highest score can be changed VERSION Chrome Version: 58.0.3029.110 Operating System: Windows 10 REPRODUCTION CASE Go to google.lk or https://www.google.com/doodles/icc-champions-trophy-2017-begins Write click and enter the following in console window: localStorage.setItem('doodle-cricket17-score', '1000') Since the highest score is 999, it can be set to that. Since there are competitions organized by trusting google doodle, someone can easily manipulate the highest score and win the competition. This spoils the fun of doodle games. Screenshots Attached. |
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by elawrence@chromium.org
, Jun 3 2017Status: WontFix (was: Unconfirmed)