8x8 · Report #2331473
Open Redirect via Non-Latin Subdomain in vcc-*.8x8.com/AGUI/█.php
Validstatus
lowseverity
$100bounty
46upvotes
20 Mar 2024disclosed
Summary
@pentestor reported an issue where a filter that prevents the usage of [1-9] and [a-z] characters in the subdomain parameter can be bypassed by utilizing a non-Latin domain. The report demonstrates the exploitation of this vulnerability by redirecting to the नमस्ते.भारत domain.
The issue has been addressed.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.