地图 / Page replacement and redirect loop

Page replacement and redirect loop

开放重定向 / 违反安全设计原则（按标题归类） / #64529

厂商: VK.com
严重程度: 未评级
赏金: —
弱点: 违反安全设计原则（按标题归类）
研究员: @tohasec
披露日期: 2019-02-24
资产: —
CVE: —

该报告还没有中文解读。

时间线

2015-05-29报告提交
2019-02-24公开披露

阅读 HackerOne 原文 ↗作者 @tohasec · 版权归作者与 VK.com 所有

同类报告

Stealing xoxs-tokens using weak postMessage / call-popup redirect to current team domainSlack · 2017-02-28 Invalid Host detection at https://hackerone.com/redirectHackerOne · 2017-12-03 Cross‑Layer State Confusion in libcurl: Credential & Key‑Material Persistence Across Redirect / Connection Reuse Boundariescurl · 2025-12-28 Redirecting users to malicious torrent-files/websites using WebTorrentBrave Software · 2022-06-30 bypass the [OKTA] login redirect can lead to disclosing limited-information about the sub-domain at [ shiptsec.com ]Shipt · —Homograph attack on redirect URL (https://chaturbate.com/external_link/?url)Chaturbate · 2018-09-20