Paragon Initiative Enterprises · Report #113112

Open-redirect on paragonie.com

Validstatus

4upvotes

7 Feb 2016disclosed

Summary

n.b. This report came in before we restricted the scope of our bounty to our open source software on Github (explicitly excluding our website), so we honored it. Please don't use its existence as an invitation to ignore the scope on our HackerOne page or the interstitials. Thanks.

How it was found

Hello,

I would like to report about open-redirect on paragonie.com

Here is the PoC that redirects to URL. For example::https://paragonie.com//google.com/

Regards,

Hat_Mast3r

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original