Hanno's projects · Report #504509
Bypassing the fix of #503922
Validstatus
mediumseverity
18upvotes
4 Mar 2019disclosed
Summary
Paramter's value set to %2f%2fevil.com redirected to evil.com. This was patched and the fix was bypassed by adding extra %2f!
How it was found
Hi,
Just bypassed the fix of open redirect.
See comments for more details.
Best Regards, -MO
Impact
Open redirection