Khan Academy · Report #6357

https://www.khanacademy.org/login open-redirect

Validstatus

3upvotes

9 Apr 2014disclosed

How it was found

Hi,

I found a bypass in the redirects : https://www.khanacademy.org/login?continue=http://www.olivierbeg.nl won't work. https://www.khanacademy.org/login?continue=http:/www.olivierbeg.nl will work :-)

Best regards,

Olivier Beg

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original