Avito · Report #355558
Open Redirect via login avito.ru | Protection bypass
Validstatus
28upvotes
11 Nov 2019disclosed
Summary
Open-redirect using the following vector and social auth: https://www.avito.ru/rossiya#login?next=///<open-redirect-url>
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.