Summary by National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
Site has been remediated. X headers updated
An *Open Redirect* vulnerability
Disclosed by hunter12- Engagement National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
- Disclosed date over 1 year ago
- Priority P5 Bugcrowd's VRT priority rating
- Status Informational This vulnerability is seen as an accepted business risk
Summary by hunter12
When sending a request with a modified value in the X-Forwarded-Host header, the server changes the redirection destination (Location) to the injected value. This vulnerability allows attackers to redirect users to malicious sites without their knowledge.