HexBrain

Unikrn · Report #1238684

Open URL Redirection

Validstatus
mediumseverity
102upvotes
28 Jun 2021disclosed

How it was found

Open URL Redirect

Steps To Reproduce:

  1. Go to the following link & Register for new account https://unikrn.com/██████
  2. After registering It will redirect to example.com

Reference: https://www.owasp.org/index.php/Unvalidated_Redirects_and_Forwards_Cheat_Sheet

Impact

The attacker can force the user to install trojans, malwares, etc. into his system. And also can steal cookies, conduct phishing attacks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original