Upserve · Report #469803

Open redirect at https://inventory.upserve.com/http://google.com/

Validstatus

mediumseverity

$1,200bounty

179upvotes

7 Jun 2019disclosed

How it was found

The following URL is vulnerable to an open redirect (it will redirect to stanko.sh):

Users could get redirected to malicious domain.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original