HexBrain

Affirm · Report #1213580

Open Redirect

Validstatus
lowseverity
$250bounty
74upvotes
31 Aug 2021disclosed

How it was found

Open Redirect Vulnerability:

URL : https://www.affirm.com/

User can be redirect to malicious site POC:https://www.affirm.com///google.com/?www.affirm.com/?category=interview&page=2

I hope you know the impact of open redirect and more info refer https://cwe.mitre.org/data/definitions/601.html

Impact

User can be redirect to malicious site

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original