Inflection · Report #240091
Open redirect at app.goodhire.com via ReturnUrl parameter
Validstatus
highseverity
23upvotes
21 Feb 2018disclosed
Summary
At login, the ReturnURL parameter could be manipulated to send a user to any arbitrary URL, rather than just a local redirect, if the user was already logged into their GoodHire account and visited the login page again.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.