Submit #50339: Open Redirect in apinto-dashboard <= v1.1.0-beta via /login?callback
| Title | Open Redirect in apinto-dashboard <= v1.1.0-beta via /login?callback |
|---|---|
| Description | repo: https://github.com/eolinker/apinto-dashboard 1,Download and unzip the installation package Apinto 2,Start gateway 3,Download and unzip the installation package Apinto Dashboard 4,Start Apinto Dashboard ```bash wget https://github.com/eolinker/apinto/releases/download/v0.8.0/apinto-v0.8.0.linux.x64.tar.gz && tar -zxvf apinto-v0.8.0.linux.x64.tar.gz && cd apinto ./apinto start cd .. wget https://github.com/eolinker/apinto-dashboard/releases/download/v1.1.0-beta/apinto-dashboard-v1.1.0-beta.linux.x64.tar.gz && tar -zxvf apinto-dashboard-v1.1.0-beta.linux.x64.tar.gz && cd apinto-dashboard ./apinto-dashboard ``` open /login?callback=//www.qq.com   login and then website jump to www.qq.com  |
| User | Tomy (ID 34751) |
| Submission | 01/11/2022 12:03 (2 years ago) |
| Moderation | 01/11/2022 16:35 (5 hours later) |
| Accepted | Accepté |
| VulDB Entry | VDB-212633 |