Loading HuntDB...

wrong url in hackerone > goes to wix.com > unconnected

Low
S
Sifchain
Submitted None
Reported by mhohlfeld

Vulnerability Details

Technical details and impact analysis

Misconfiguration
## Summary: Hi there, this is a very small issue out of scope. Your current domain name in your hackerone program is wrong: http://sifchain.finance and moves to wix.com ## Steps To Reproduce: 1. Login as a researcher 2. Open the program from sifchain: https://hackerone.com/sifchain?type=team 3. click on the public url: http://sifchain.finance 4. you will be redirected to wix.com and see message "not connected" ## Supporting Material/References: * screen movie: F1291486 ## Impact I think there is no impact. **But maybe** (Maybe - because i don't know how wix.com works): An attacker can create a new website and give his wix-project the name "sifchain.finance" *or* can connect an external domain "sifchain.finance". The attacker can create a copy/paste fake website. Than all researchers who click here on hackerone.com on the link will come to a fake website. The attacker maybe can steal sifchain login data from the researchers.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Misconfiguration