HexBrain

Infogram · Report #283269

A10 – Unvalidated Redirects and Forwards

Informativestatus
lowseverity
9 Nov 2017disclosed

How it was found

https://infogram.com/login

Web applications frequently redirect and forward users to other pages and websites, and use untrusted data to determine the destination pages. Without proper validation. when i intercept the twitter request and change it to the google then it will redirect you to the google. application should also verify the original request from the browser.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original