Cross-site scripting vulnerabilities were found on the NSA's forward facing web server due to "shoddily outsourced third party" Coldfusion software, researchers say.
Rustle Research researcher Horace Grant said the since patched flaws could allow attackers to impersonate NSA personnel and web traffic.
“Why are unreliable third parties creating the software that guards our national secrets?"
One of the vulnerabilities was in the careers section on the site while the other XSS bug was found in the ‘Mail to a Friend' notice.
Cross Site Scripting attacks were the most common attack type in Q3 of 2012 according to research by FireHost.
_(33).jpg&h=140&w=231&c=1&s=0)
iTnews Cloud Covered Breakfast Summit
Huntress _declassified Virtual Event
Live & Hands On Demo: Navigating the BMC AMI DevX Platform to Understand Code Faster Using AI
Melbourne Cloud & Datacenter Convention 2026
iTnews Executive Retreat - Data & AI Edition
_(1).jpg&h=140&w=231&c=1&s=0)
