X / xAI · Report #1421345
Link-shortener bypass (regression on fix for #1032610)
Validstatus
mediumseverity
$560bounty
24upvotes
12 Dec 2022disclosed
How it was found
Report #1032610, entitled
Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links
was closed as _Resolved _ about six months ago.
However, a regression on the fix for the vulnerability in question seems to have occurred, and the bug is reproducible with the exact same payload.
Impact
Refer to #1032610.