Valve Fixes Security Flaws In Steam Community

The Steam community site was deemed unsafe due to XSS (cross-site scripting) exploit that redirect users to a fake or phishing site, and compromise Steam users account. There’s a chance that users might lose their Steam Wallet funds from this vulnerability.

valve account

A post on Steam subreddit warns users of what the exploit does and advises users against clicking on Steam profile links.

  • Redirect you to any non-steam page, for example a phishing login page. From a user perspective it is you going to a legitimate Steam profile, then you see a login page.
  • Utilize scripting to use your Steam Market funds on any item the malicious user chooses, you wouldn’t even need to confirm anything as you’re on a valid login session.
  • Manipulate elements on the page as they see fit.
Currently, there is a risk (i.e. phishing, malicious script execution, etc.) involved when viewing or simply opening PROFILE pages of other steam users as well as your OWN activity feed (both desktop and mobile versions on all browsers including steam browser/chromium),” the warning says. “I would advise against viewing suspicious profiles until further notice and disable JavaScript in your browser options. Do NOT click suspicious (real) steam profile links and Disable JavaScript on Browser.

The good news is that the issue has been fixed by Valve.

Related posts

Top 10 Games To Try in Steam Early Access

Top 10 Games To Try in Steam Early Access


Top 10 Games To Try in Steam Early Access

Steam Early Access is a hit or miss for adventurous gamers. You might find a game that you love to play, or you may spend money on games that you'll never play more than once. The good news is that there are multiple sales and specials that offer huge savings on early access games. Buy a...

Top 10 Garena Free Fire Characters To Play As

Top 10 Garena Free Fire Characters To Play As


Top 10 Garena Free Fire Characters To Play As

Garena Free Fire, also called just Free Fire, is a battle royale that gives you a break from the likes of Fortnite and PUBG. If you’re an Apple or Android fan, you’ll be able to enjoy countless hours of fun with your friends and with others.The game set a personal record of 80 million daily...

How to Get Chicken Dinner on PUBG Mobile – Top Tips and Tricks

How to Get Chicken Dinner on PUBG Mobile – Top Tips and Tricks


How to Get Chicken Dinner on PUBG Mobile – Top Tips and Tricks

What’s the ultimate goal in PUBG? To be the last player standing. It’s no easy feat, but if you can manage it, you will get the covetedChicken Dinner. Some players have gotten more than one. Many more are still chasing the dream. So, what’s the secret to getting that elusive chicken dinner?...

Leave a comment