Slack · Report #6035
open redirect in https://slack.com
Informativestatus
2upvotes
31 May 2014disclosed
How it was found
Navigate to Https://slack.com append "/link?url=url=http://bing.com" or enter any website of your choice with http:// vulnerable link https://slack.com/link?url=http://bing.com notice that user is redirected to bing.com without being validated or notified