HexBrain

VK.com · Report #1206117

Open redirect в карусели сообщения бота

Validstatus
lowseverity
$300bounty
18upvotes
24 Jun 2021disclosed

Summary

Открытое перенаправление в каруселях чат-ботов.

Уязвимость позволяет перенаправить пользователя на вредоносную ссылку из карусели, минуя away.php

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original