Es posible poder navegar a cualquier pagina en Point Smart application
Low
M
MercadoLibre
Submitted None
Team Summary
Official summary from MercadoLibre
We thank @andresbebe for the report and for providing clear reproduction steps with a proof-of-concept code demonstrating the vulnerability. MercadoLibre acknowledged the issue and worked on a fix internally. A vulnerability has been identified in the Point Smart application where users can navigate outside the intended application environment through a link. This navigation capability potentially allows for the vectorization of phishing attacks.
Actions:
Reported by
andresbebe
Report Details
Additional information and metadata
State
Closed
Substate
Resolved