HexBrain

Localize · Report #2828499

open redirected by host header

Duplicatestatus
73upvotes
2 Dec 2024disclosed

How it was found

An Open Redirect vulnerability occurs when an application allows users to be redirected to an external, untrusted URL without validating the redirection target. By controlling the Host header and observing a redirection to the specified external site, you may have found an open redirect vulnerability.

STEP TO REPRODUCE: go to www.localizestaging.com and interpret then change host header .it will redirect to changed host header webisite

Impact

This vulnerability can be exploited for phishing attacks, where users are misled into visiting a malicious site that appears to be trusted. It could also be used to bypass security filters or conduct other malicious activities.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original