Google has rewarded security researchers from Detectify with $10,000 (7,200) for identifying an XML External Entity (XXE) vulnerability in one of the search engines features. According to experts, the vulnerability plagued the Google Toolbar Button Gallery. Researchers found the security hole after noticing that Google allowed users to customize their toolbars with new buttons. Developers can add their own buttons by uploading XML files containing metadata for styling and other p…
Comments are closed.
