Sifchain · Report #1187018
wrong url in hackerone > goes to wix.com > unconnected
Validstatus
lowseverity
5upvotes
7 May 2021disclosed
How it was found
Summary:
Hi there, this is a very small issue out of scope. Your current domain name in your hackerone program is wrong: http://sifchain.finance and moves to wix.com
Steps To Reproduce:
- Login as a researcher
- Open the program from sifchain: https://hackerone.com/sifchain?type=team
- click on the public url: http://sifchain.finance
- you will be redirected to wix.com and see message "not connected"
Supporting Material/References:
- screen movie: F1291486
Impact
I think there is no impact.
But maybe (Maybe - because i don't know how wix.com works): An attacker can create a new website and give his wix-project the name "sifchain.finance" or can connect an external domain "sifchain.finance". The attacker can create a copy/paste fake website. Than all researchers who click here on hackerone.com on the link will come to a fake website. The attacker maybe can steal sifchain login data from the researchers.