POJIA破甲
地图 / Open redirect in ck.php and lg.php

Open redirect in ck.php and lg.php

开放重定向 / 开放重定向 / #1081406

厂商
Revive Adserver
严重程度
低危 · CVSS 5.4
赏金
—
弱点
开放重定向
研究员
@mbeccati
披露日期
2021-01-20
资产
https://github.com/revive-adserver/revive-adserver
CVE
CVE-2021-22873

该报告还没有中文解读。

原文摘录

摘自原文(570 字符中的一小部分)
An opportunity for open redirects has been available by design since the early versions of Revive Adserver's predecessors in the impression and click tracking scripts to allow third party ad servers to track such metrics when delivering ads. Historically the display advertising industry has …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Revive Adserver 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @mbeccati · 版权归作者与 Revive Adserver 所有

同类报告

XSS and Open Redirect on MoPub LoginX / xAI · 2019-09-24 · $1,540Open Redirect in secure.showmax.comShowmax · — · $550[PayPal Android] Remote theft of user session using push_notification_webview deeplinkPayPal · 2019-02-07Open redirect at https://inventory.upserve.com/http://google.com/Upserve · 2019-06-07 · $1,200Open Redirect in Logout & LoginExpedia Group Bug Bounty · 2023-03-02[Venmo Android] Remote theft of user sessionPayPal · 2019-02-07
Open redirect in ck.php and lg.php · 破甲 POJIA