U.S. Dept Of Defense · Report #187006
Open Redirect in a DoD website
Validstatus
lowseverity
5upvotes
14 Feb 2017disclosed
Summary
An open redirect vulnerability was found on a Department of Defense website which may trick a web user into being redirected to fake websites which may steal data or credentials (usernames and passwords), or trick users into installing malware. adrianomarcmont was able to demonstrate this vulnerability by crafting a specially formatted URL. Thanks adrianomarcmont!
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.