HexBrain

Khan Academy · Report #163272

OPEN URL REDIRECT through PNG files

Validstatus
mediumseverity
18upvotes
17 Feb 2017disclosed

Summary

An abuse of the image_url parameter when saving a CS program was able to create an arbitrary external redirect. We now validate the parameter before using it.

I have found a way through which an attacker can use png files to redirect to malicious domain .

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original