Khan Academy · Report #163272
OPEN URL REDIRECT through PNG files
Validstatus
mediumseverity
18upvotes
17 Feb 2017disclosed
Summary
An abuse of the image_url parameter when saving a CS program was able to create an arbitrary external redirect. We now validate the parameter before using it.
I have found a way through which an attacker can use png files to redirect to malicious domain .
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.