HexBrain

Imgur · Report #91332

Open Url redirection on login with facebook

Informativestatus
3upvotes
9 Dec 2015disclosed

How it was found

steps to produce: 1, go to the site imgur.com and login with facebook and if you are new user then u must be asked for username on the link https://imgur.com/register/thirdparty/facebook?redirect=http://imgur.com/

nw just change the parameter redirect= value to https://google.com and hit enter and give username and click next and you will redirected to google

Regards Dipak

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original