Rxss on █████████ via logout?service=javascript:alert(1)

How it was found

Description: I found open redirect and xss (Rxss) at the ██████████ logout page, https://████/██████████/logout?service=https://google.com It also allows javascript URIs, leading to Xss

Impact

Attacker can trick users to visit malicious websites or can lead to phishing and many other type of attacks, and can steal user token, IP & etc. with xss

System Host(s)

████████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

1. Take this URL: https://███████/█████████/logout?service=https://google.com
2. Change "https://google.com" to whatever URL you want to redirect to.
3. Visit the URL and click on back button and you will be redirected to that site
4. for xss replace https://www.google.com with you xss payload ex: https://██████████/██████/logout?service=javascript:alert(1)

Suggested Mitigation/Remediation Actions