Shopify 路 Report #905737
Open Redirect - www.shopify.com
Validstatus
lowseverity
17upvotes
14 Jul 2020disclosed
Summary
At first I thought I was getting paid for the open redirect 馃憖
How it was found
Hello Shopify team,
I found an open redirect in www.shopify.com
Link:
https://www.shopify.com/plus/get-cdn-asset?asset=http://evil.com/?
Vulnerable parameter: asset
Impact
- Open redirect that can lead to phishing and other type of attacks.
Have a good day, zonduu.