HexBrain

Slack · Report #2731

Open redirect vulnerability

Informativestatus
11upvotes
6 Apr 2014disclosed

How it was found

Hi,

Open redirect issue:

  1. Go to this URL:

https://sehacure.slack.com/link?url=http://www.likelo.com

The victim will be redirected.

Impacts:

The attacker can force the user to install trojans,malwares, etc. into his system. And can conduct phishing attacks.

Please have a check.

Best regards, Anand

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original