HexBrain

Slack · Report #6035

open redirect in https://slack.com

Informativestatus
2upvotes
31 May 2014disclosed

How it was found

Navigate to Https://slack.com append "/link?url=url=http://bing.com" or enter any website of your choice with http:// vulnerable link https://slack.com/link?url=http://bing.com notice that user is redirected to bing.com without being validated or notified

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original