HexBrain

Weblate · Report #223718

Open redirect in Signing in via Social Sites

Duplicatestatus
mediumseverity
3upvotes
17 May 2017disclosed

How it was found

Weak Authentication Leads to the Open redirection to Malicios Sites :

Signing in via Facebook :

Signing in via Gmail :

Signing in via Github:

Signing in via Bitbucket:

Signing in via Gitlab:

Vulnarable Parameter:

" next "

Greets Raja Uzair Abdullah

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original