Lucene search

K
openbugbountyNeo-ZeroOBB:1354015
HistorySep 21, 2020 - 5:30 p.m.

nikkei.com Open Redirect vulnerability OBB-1354015

2020-09-2117:30:00
Neo-Zero
www.openbugbounty.org
6

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: nikkei.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Other
Vulnerability Type: Open Redirect / CWE-601
CVSSv3 Score: 3.4 [CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: Neo-Zero
Remediation Guide: OWASP Open Redirect Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAARP0lEQVR4nO2dbUxT1//Ar13FCuW5LQhVgbBKiHMNYZ1b0DBCHOsa1jl1DhG3iA8hDXNkGmXGMcfU+ZA4txGyuEXNwnzFCDGGmMYRRhrDWFe7yrAhWLpaO1YIuIqlFO7vxfnv/m/uw+G2Uirs+3l1nu75Ppxz75dzeu9hCUmSBAAAAABEAFG0FQAAAAAWLRBjAAAAgEgBMQYAAACIFBBjAAAAgEgBMQYAAACIFBBjAAAAgEix8GJMdnb27du3+bIAJ4vJS9G1ZT6lL6ZRA/6zLLAY8/vvv8/MzDz//POcWYCTxeSl6Noyn9IX06gB/2XmMsYMDQ3Fx8fz1Y6Pj588eZKdDon29vby8nK+7PwzNDSUnJwcRekYh1MgLwlszOg/QtaFoQwiuiNOSf/777937NiRmpqamZn5wQcfTE5OogYjIyM7d+6Uy+WZmZlHjhyZmppC5ZOTk++88w7D5Hv37r3xxhvJyclpaWl79uwZHx8XLotPUEiy+Dq5e/fua6+9lpiYmJaWtnv3bkoxTk3wVkSaMCZS2A8fIDzmbx0zNjZ24sQJdjoknrYYE11Wr17t9XpnbYa8JLDxU85TEmOqqqokEonNZuvq6rJarUePHkUNqqqqZmZmLBbLzZs3Ozs7jx8/ThDE5ORkWVlZMBhk9KbT6fLy8vr7+2/duuX1emtqaoTL4hQUqiy+TrRarVKp7O/vN5vNfr9///79lHVsTfBWPIWE/fABwoScOxwOh1QqFVKLb8mH2+1OSkoKBAKc2ajgcDiSkpKiqMCsPImXImfdnEyAeYaS7vP5JBKJz+dD5T09Pbm5uSRJ+nw+kUg0NjaGyru7u1UqFUmSDoejsbGRYfLw8LBYLKayFotFqVQKlMUnKCRZfJ34/f7z588/fPgQlVutVqQYpyZ4K+aBMCZSeHMPCJtZ1jGMpaiQzZMvvvgiOzs7NTV1586d1MJ5fHw8KyvL5/MtWbKkubmZSl++fBmJOHPmTFpaWnJy8q5dux4/fszZc3t7+6ZNm5YuXcrOvvnmm2fOnEHlt2/fXrZsGSV63759zz77LKb24MGD+MsPHjxIV+P+/fuvvvpqfHz8mjVrWlpaqPJffvnlpZdeWr58uVwu37p16/3791H59PT0kSNH0tLS4uLitm7dOjIywrCLs8GjR4/27dsnl8tXrlz5ySefTE9Psx2CXId3IOUl+lCi9Llz57Kzs5OTk3fs2EHZy2fd5OTk7t274+PjV69e/fHHHyN97t27FxcX99tvvxEEMTIykpyc/NNPP7E15NONPVVCsoXdDJWfPHlSLpevWLHi22+/5dMcjdeGDRvi4+MzMzPfeuutP/74g6+QIT0uLu7x48dxcXGoPBAIxMTEEATh9XpjY2MTExNRuVKpHB4eJghi9erVH330EWPs5HK5SqX6+uuvCYJ4/Phxc3NzUVGRQFl8gkKSxdfJsmXL3n//fTRVpqamvv/++5KSEoIgODXBW8GGPvHi4uLefvvtkZGRgwcPyuXy1NTU995779GjR9TosO8mzvGluHPnTmpq6s8//4yynONOfxBdvnyZEHajAU9C+HtlchYEQfh8PovFYjKZenp63G734cOHUePExMT+/n6pVOr3+/fs2UOlKysr0VU9PT29vb29vb1ms/n06dOcEjEbZTqdzmg0ovS1a9dmZmY6OjpQ1mg06vV6TK1Wq8VfrtVq6WoYDIaEhIS+vr7r16/Tn8Jms3nv3r0ej8dmsymVSoPBgMpPnz5tNBqNRqPdbs/IyOjr62PYxdmgtrbW7XabzeaOjo729vampibMWGAcyLe55PP5rFYrGimn01lfX4+37vjx4xMTE1artaOjo6urq7m5mSCI7Ozs+vr6AwcOEARx7NgxrVb7yiuvCNSNb6oItAXTbX9/v81mu3TpEnrecWpOEIROp3v33XedTmd3d3dRUZFEIuErxHuysbGxqqoKMzp8XLt2rb6+fvny5QkJCZ2dnRcvXoyKLD5+/PHH2NjYnp6eb775BqNJqD2jce/u7rZYLG63Oy8vz+v1Wq3WW7duORwOah7y3U3s8UWMj49v3rz51KlTGzZsQCWc405/EKGHT0g3GhAO+GUOY11J3zxxsXA4HARBUKtsk8mUk5PD2RUjTRCE0+lE2dbW1sLCQpR2Op1ZWVko7fP5pFLp6OgoZ9btdsfGxvr9fpIkNRpNXV1dRUUF6jwhIcHpdGJqA4EA/nL65kwwGJRIJHRtOXeTBgYG0tPTUVqhUJjNZoyT2Q2CwaBUKh0cHETZ9vb29evXsy9EbsQ4kO4lts+pkeru7kYjhbFOJpNR+yQWi0Wj0aB0IBDIy8traGiQyWQej4etIadufFNFuC2YbqlZgdF8dHRULBajEafgLGRLp9PQ0FBaWhoMBknszcKuJUmytra2oKCgp6fnxo0bSqXy4sWLAmXhBQmUNWsnExMTXV1da9eubW5uxljNZwUnaIDoG3QikWhiYgJlTSYT2nVkQN1N7PGlrNBqtTU1NfSr+GYs3XCBNxrwJIQfY0JtjIkxEomEatbX16dQKFA6GAy63W6Ubm1tLSkpoZoxsiRJqtXqmzdvejwepVI5NjamUCiCweDFixc3b948a62QBgi3283QlrLRbDaXlpZmZGTIZLKUlBRUPjY2JhaL0d3ICWcDt9sdExNDZe12OxWx6FAxhs+BdC9hfg+jRorPutHRUYIgZP+SkpJCiSBJEi0BL1y4wKkhp258Cgi3RUi3eM23b9+uVqvr6urOnj3b2dmJKSS55htJkm1tbTk5OV6vF+9VztpAIBAbG2u1WlG2paWFiqazygo1xnDKEnhrX79+vaCggE8TjBWczOoi/N3EHl9UUl9fLxKJvvvuO6ocM+70TgTeaMCTIA57AYQ2x+j09vaG3RsnzzzzzIoVK1B61jfKtFqt0WgcHBzU6XSJiYlqtbqrq4va6cLXCmkwK3q9vrq6urm5WSKRuFyusrIyuiGzWipQSkjM1VtYfr9fJBL19vaKxf83YUSi/99l9Xg8IpHI4/E8uSAM4dmC0fyHH3749ddfbTab2+2uq6t7+eWXv/zyS85CTul37tzZv39/R0dHampqGOaMjo4GAoHnnnsOZdVqtcvl4rM0crLYTE1NWSyWF154AWVzcnLcbjefJiH1HBKYu4nBxMREa2vr1atXDQbD5s2b0S9M+BkLzCv4EPTw4UORSETfVMHvlYW3jiFo+x5tbW3sP4WCwaBMJqOWtIwswmQyaTSa8vLy69evkyTZ1NRUW1ubnp6OVkL4WiENKNH03aS2tjZkI/sFG8p2hUJhsVgwTmY3eJK9MsqBDC8JWcfwWUeSpFQq5dzxGxsbS09Pv3r1akpKSl9fH1tDTt0w6xiBtgjpFq85Hc4XoqhC9nwbHR3Nzc1taWmht8e87sWpm0QiGRgYQOnW1lY0xEJk4QUJlIV5r0wsFlP7Ue3t7dQuE6fVnFbwIXAdw3c3ca5jxGIxmng6nc5gMFBVfOMOe2XzzOzvLms0murqao/HY7fbi4qKwt4r8/l8YrHYbrcz0uh5sWXLFpfLZbPZ1Gp1Q0MDdRXaHEf7wlQhI0uhUCgUCgW6xOVyJSQkqNVqgbX4BvQ9er1eT9eWHkuamprGxsbsdrter6fKT5w4odForFary+UyGAxdXV2MDjkbVFdXl5eXO51Om81WUFBA7UTRL6THGLYDGV4SEmMw1u3fv3/9+vXoD/zTp08fP34cldfU1Gzbto0kycbGxuLiYoaSfLrhY4wQW4R0i9G8r6+vrKzs5s2bXq/X6XRWV1frdDrOQrb0YDBYWlpaW1vrp4GqysrKKisr3W43ulmOHj3K6X+EwWAoKSkZHBw0m80qlerSpUvCZWEECZfF14lOp9u+fbvL5bJYLPn5+U1NTRhNOHvmQ/heGefdxLdXhtL9/f0SiYTauOObsfSHD8l/owFzxewxZmBgoKSkRCqV5ufnX7hwIewYQ5JkQ0NDbGwsmoVUGl116tQphUKRlJRUVVVF/QZIdfjhhx/W19dT/TCyFBUVFVu2bKGyhYWF9Gb4WkwDhl0ul2vTpk1SqVSlUp09e5aysaurq7CwUCKRpKen19XVUeXBYPDQoUMymUwikej1eq/Xy+iQ3YAkSZ/Pt3fvXplMplQqGxoa+H5VRjGG04EMLwmMMXzW+f3+AwcOKJXK2NhYrVaL/vTr7e2VSqVoPeH3+7Oysq5cucIWxNYNE2OE2zJrtxjNA4FAQ0ODSqWKiYlRKBSVlZUej4ezkFM6YzOA8tLw8HBFRUVKSkpGRsbhw4fpb4uwdfP7/QaDQaFQrFq16uzZs6hQoCyMIOGy+DoZHh7evn17UlKSUqlsbGzEa8LZMx/CYwzn3YSPMSRJ1tbWbty4kTKZPe4I+oOI80YD5pC5/AYzPDifCwxUKtWtW7f4sv9Z6DGGXfs0eEnI4Appz7Al1G6fkPn05NMwagAwh4T/m/98cvfuXUwW4GQxeSm6tsyn9MU0agBALLhzlwk42/9fpqamTCaTUqmMtiIAwIT9gTbin3/+ibZqwHyzMNYxFHC2P8XevXvb29uFfLANAPOMxWLhLA/vsG1gQbOEJMm56mtoaGjt2rV8f6qMj483NTUdOXKEkQ6Jzz77zOPxoE8W2Nl5gM9GvO0AAAD/TeBs/7lhcZycDwAAMLcspN9jHjx4YLfbi4uLObNRZ9myZdFWAQAA4OkCzvYP+Wx/giA+//xzzlPl6U7jPDn/wYMHr7/+enx8fHZ29rlz5zidKfyof+EnpQMAAEQFONs/5LP9fT5f77/waYs5OT8mJmZgYMBoNF65coXTzJCO+hd4UjoAAEB0wH8+g/8g/D94tj+ftmyL+E7Op7435vu/AMKP+neEdVI6AADAvBH+u8uZmZmMkqGhIalUSm0ZZWRkoBO2Z0UikaxcuRKl8/LynE4n1YPJZELpGzduaDQaanOJkV2xYoVKpTKZTPn5+W63+9ixYyqVanp62mg0lpaWrly5ElO7dOlS/OXU7hxeWzp0PyiVSuSH4eHhmZmZ7Oxs6lr2hePj46Ojo+vWraMXDg8PBwIB+oXUwR5SqZT+rwwTEhKWL19OeQ9eQwAAILrA2f5zdrb/HBKho/4BAADmmVl+j0lJSZmYmKA++6D/cwgLi7CV8Pv9f/75J0rb7fZVq1YxGkxPT1+7do0KKowsAv2mQsUevV7f1tbW2dmJggS+VkgD4dryoVAoRCLR0NAQyvb397PbJCYmpqSkME4uUCgUMTEx9+7doy7MysoSKBQAACCazLqbBmf7kyEeVo/xw5YtW/R6vcPhsNls69ato59qTLUXftS/8FNsAQAAosLs75W1tLQMDg7m5ubq9fpt27aFHczi4uKOHj2qVqsvX75MTxMEIZVKCwsLCwoKioqK1q1bd+jQIXTJ0NCQTCYjBH96WVpaunHjRvSdSmZmpkqloq9C8LWYBpQaCKlUqtFo2NoK4auvvgoGg2vXrtXpdBUVFQwzEYcOHSouLi4pKcnNzXW5XPn5+QRBnD9/Pj09vaCgoKysrLy8vKamRrhQAACAaDGXZ8mEh5BTWNasWXPlypUXX3yRM7tAuXv37saNG//6669oKwIAABApFsaZmIvybH+LxZKTkxNtLQAAACLIwogxi4ZPP/00IyOjvLx8cHCwvr7+2LFj0dYIAAAggiyk88oWAcXFxU1NTUqlsrKysra2dteuXdHWCAAAIIJE//cYAAAAYLEC6xgAAAAgUkCMAQAAACIFxBgAAAAgUkCMAQAAACIFxBgAAAAgUkCMAQAAACIFxBgAAAAgUkCMAQAAACIFxBgAAAAgUkCMAQAAACIFxBgAAAAgUkCMAQAAACIFxBgAAAAgUkCMAQAAACIFxBgAAAAgUvwP0zYE7R/3nfcAAAAASUVORK5CYII=)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 21 September, 2020 17:30 GMT
Vulnerability Verified: 22 September, 2020 09:19 GMT
Website Operator Notified: 22 September, 2020 09:19 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 22 September, 2020 09:19 GMT
Vulnerability Fixed: 24 September, 2020 17:33 GMT