Summary by I_Komang_Dahesa_Gadyanga
In this case, the attacker can access the admin login panel and there is also an open redirect host.
Admin panel discovery, Host header open redirect
Disclosed by I_Komang_Dahesa_Gadyanga- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date about 2 months ago
- Priority P5 Bugcrowd's VRT priority rating
- Status Informational This vulnerability is seen as an accepted business risk