GitLab · Report #214034
Open redirect
Validstatus
mediumseverity
4upvotes
6 Apr 2017disclosed
How it was found
POC:
$GITLAB_INSTANCE = gitlab.com
Visit:
https://$GITLAB_INSTANCE/dashboard/todos?page=99999999&host=www.google.com
Bug is in Dashboard::TodosController line 10
Likey
Same bug in Projects::IssuesController line 32
and other places in the codebase where you redirect_to params.merge(..)