
Open Redirect Vulnerability in Kanaries
Vendor Homepage: https://kanaries.net/
Poc Video: https://drive.google.com/file/d/1kqfbmx1W6UgSs56gOLOsUFiGcvKrIyW9/view?usp=sharing
Navigate to the Kanaries website.
redirect_path parameter to a malicious site, such as:
https://kanaries.net/access?redirect_path=https%3A%2F%2Fbing.comClick on "Login With GitHub" or "Login With Google" to initiate the login process.
Instead of being redirected back to the intended page (kanaries.net), you are redirected to bing.com (or any malicious URL specified in the redirect_path parameter).
