Loading HuntDB...

Open redirect on https://hq-api.upserve.com/

Medium
U
Upserve
Submitted None

Team Summary

Official summary from Upserve

The return_to parameter on https://hq-api.upserve.com/auth/auth0?prompt=none&return_to= was not validated and allowed an open redirect.

Report Details

Additional information and metadata

State

Closed

Substate

Resolved

Submitted

Weakness

Open Redirect