HexBrain

Urban Dictionary · Report #12949

Open Redirection

Validstatus
2upvotes
8 Jul 2014disclosed

How it was found

Try to connect your facebook using this URL

http://www.urbandictionary.com/auth/facebook?origin=http://google.com

after connecting urbandictionary to FB you will be redirected to google.com

and that is bad because hackers can get the auth token

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original