HexBrain

Eternal · Report #473064

Open Redirect On Your Login Panel

Informativestatus
lowseverity
11upvotes
14 Feb 2019disclosed

How it was found

Summery Hey There are a open Redirect on your login panel

Platform(s) Affected: Website

Browsers Verified In [If Applicable]:

  • Chrome For Android
  • Firefox For Android

Steps To Reproduce:

  1. Go To This Url :- https://www.zomato.com/login?redirect_url=https://askdcodes.org
  2. Then login there
  3. boom you got Redirected to askdcodes.org

Supporting Materials

Attaching A Video Poc

Impact

Any Attacker can Redirect your users to malicious website

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original