X / xAI · Report #39631
Open redirection in fabric.io
Validstatus
$280bounty
3upvotes
18 Dec 2014disclosed
How it was found
Hi dear, Once the person is logged into his account he can be redirected to any website .
https://www.fabric.io/login?redirect_url=@<payload>
for example : https://www.fabric.io/[email protected]
Tested on updated firefox and chrome.