Flickr · Report #1581258
Open Redirect
Validstatus
lowseverity
$258bounty
15upvotes
29 Sept 2022disclosed
Summary
A misconfiguration of the routing system was at fault. A wildcard URL pattern existed with the intention to send visitors to a 404 page but this wasn't reliably working. Now when the wildcard handler catches a URL it redirects reliably to a dead end 404 page.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.