HexBrain

Mavenlink · Report #77221

Open/Unvalidated Redirect Issue

Validstatus
2upvotes
6 Aug 2015disclosed

Summary

Open Redirect on app.mavenlink.com

How it was found

HI

User can be redirect to malicious site POC: https://app.mavenlink.com/logout?from_mobile=true&return_path=//google.com

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original