HexBrain

U.S. Dept Of Defense · Report #1634105

Open Redirect at █████

Validstatus
mediumseverity
6upvotes
18 Nov 2022disclosed

How it was found

Open Redirect on https://███

User can be redirect to malicious site POC: ████████/texis/search/redir.html?query=1234&pr=External+Meta&prox=page&rorder=500&rprox=500&rdfreq=500&rwfreq=250&rlead=500&rdepth=62&sufs=3&order=r&u=http://evil.com&m=0&p=2

I hope you know the impact of open redirect and more info refer

https://cwe.mitre.org/data/definitions/601.html

Impact

User can be redirect to malicious site.

System Host(s)

███████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Just open: █████/texis/search/redir.html?query=1234&pr=External+Meta&prox=page&rorder=500&rprox=500&rdfreq=500&rwfreq=250&rlead=500&rdepth=62&sufs=3&order=r&u=http://evil.com&m=0&p=2

Vulnerable parameter: u=

Suggested Mitigation/Remediation Actions

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original