| Title | Open Redirect in apinto-dashboard <= v1.1.0-beta via /login?callback |
|---|
| Description | repo:
https://github.com/eolinker/apinto-dashboard
1,Download and unzip the installation package Apinto
2,Start gateway
3,Download and unzip the installation package Apinto Dashboard
4,Start Apinto Dashboard
```bash
wget https://github.com/eolinker/apinto/releases/download/v0.8.0/apinto-v0.8.0.linux.x64.tar.gz && tar -zxvf apinto-v0.8.0.linux.x64.tar.gz && cd apinto
./apinto start
cd ..
wget https://github.com/eolinker/apinto-dashboard/releases/download/v1.1.0-beta/apinto-dashboard-v1.1.0-beta.linux.x64.tar.gz && tar -zxvf apinto-dashboard-v1.1.0-beta.linux.x64.tar.gz && cd apinto-dashboard
./apinto-dashboard
```
open /login?callback=//www.qq.com


login and then website jump to www.qq.com
 |
|---|
| User | Tomy (UID 34751) |
|---|
| Submission | 11/01/2022 12:03 (4 years ago) |
|---|
| Moderation | 11/01/2022 16:35 (5 hours later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 212633 [eolinker apinto-dashboard /login callback redirect] |
|---|
| Points | 17 |
|---|