地图 / Password reset link injection allows redirect to malicious URL

Password reset link injection allows redirect to malicious URL

开放重定向 / Unlabeled / #281575

厂商: Mavenlink
严重程度: 中危
赏金: —
弱点: Unlabeled
研究员: @cablej
披露日期: 2017-12-13
资产: —
CVE: —

该报告还没有中文解读。

时间线

2017-10-21报告提交
2017-12-13公开披露

阅读 HackerOne 原文 ↗作者 @cablej · 版权归作者与 Mavenlink 所有

同类报告

Confirmed #2118458: Intentional redirect from www.hackerone.com to domain which is up for saleHackerOne · 2024-05-09 [dev.twitter.com] XSS and Open RedirectX / xAI · 2017-09-29 · $1,120 reverb.twitter.com redirects to vulnerable reverb.guruX / xAI · 2016-10-01 Open Redirection effects autodiscover.rockstargames.comRockstar Games · 2025-02-03 [dev.twitter.com] XSS and Open Redirect Protection BypassX / xAI · 2019-02-07 · $1,120 Open Redirect on lovable.dev via redirect parameter leads to phishing attacksLovable VDP · 2026-03-05

Password reset link injection allows redirect to malicious URL · 破甲 POJIA