Revive Adserver · Report #794144
Open redirection bypass in /www/admin/campaign-modify.php
Validstatus
lowseverity
7upvotes
12 Mar 2020disclosed
How it was found
Description
-
There is an open redirect on /www/admin/campaign-modify.php?return_url= {F713773}
-
By using //// at the start of the link, you can bypass the open redirect filter.
-
example:
/www/admin/campaign-modify.php?clientid=&campaignid=&returnurl=%2F%2F%2F%2Fhackerone.com
Impact
This vulnerability can be used for phishing attacks