Open redirect vulnerability in a DoD website

Summary

An open redirect vulnerability was found on a Department of Defense website which may trick a web user into being redirected to fake websites which may steal data or credentials (usernames and passwords), or trick users into installing malware. @niwasaki was able to demonstrate this vulnerability by crafting a specially formatted URL. Thank you for notifying us!