Exposed Slinky Instance Admin Panel

How it was found

Last night the following server went from a 404 to a 200: ███████

Upon navigating to this page, I found that there was a slinky admin panel available here with the ability to change and modify URL redirection.

https://slinky-server.shopifycloud.com/

Impact

Ability to modify potentially trusted URL redirects