HexBrain

X / xAI · Report #39631

Open redirection in fabric.io

Validstatus
$280bounty
3upvotes
18 Dec 2014disclosed

How it was found

Hi dear, Once the person is logged into his account he can be redirected to any website .

https://www.fabric.io/login?redirect_url=@<payload>

for example : https://www.fabric.io/[email protected]

Tested on updated firefox and chrome.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original