Skip to content

[Security] Unvalidated Redirect in login page #35

@richcocks

Description

@richcocks

Hi,

If I were to link to dbpatterns with this url: http://dbpatterns.com/accounts/login/?next=//malicious.example.com

Then after logging in you are redirected to malicious.example.com.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions