CERT/CC · Report #103546
manipulate the Practical HTTP Host header
Validstatus
7upvotes
12 Dec 2016disclosed
Summary
Report claims redirection on http://www.kb.cert.org using Host header, could not reproduce. Host header was used to generate content. Host header removed from all content generating code.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.