Description

An Open Redirect vulnerability enables attacker to redirect the victims/users to malicious websites.

Proof of Concept

1. Visit https://demo.microweber.org/demo/api/logout?redirect_to=https://example.com

It will redirect you to example.com

Impact

Attackers can use it in phishing campaigns and get users visit their malicious sites without realizing it. Attackers can manipulate users in visiting unintended websites.