OWOX, Inc.: invalid URL parsing with and '@'

2016-11-24T15:19:49
ID H1:184881
Type hackerone
Reporter yynl
Modified 2017-05-22T09:50:20

Description

Description : invalid URL parsing with and '@' this can harm full for user

Live POC : https://my.bi.owox.com@evil.com