ai.fmcsa.dot.gov Open Redirect vulnerability

2016-02-25T00:01:00
ID OBB:137724
Type openbugbounty
Reporter MLT
Modified 2017-07-26T17:35:00

Description

Vulnerable URL:
https://ai.fmcsa.dot.gov/SessionTransfer/SessionTransfer.aspx?dir=2aspx&guid;=40b77b64-f1f2-4f0e-992b-63aa206e5a18&url;=http://xssposed.org/
Details:

Description| Value
---|---
Patched:| Yes, at 26.07.2017
Latest check for patch:| 26.07.2017 17:35 GMT
Vulnerability type:| Open Redirect
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 6
VIP website status:| No
Check ai.fmcsa.dot.gov SSL connection:| (Grade: A-)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 25 February, 2016 00:01 GMT
Notification sent to subscribers (without technical details)| 25 February, 2016 02:17 GMT
Vulnerability details disclosed by researcher| 19 May, 2016 00:11 GMT
Vulnerability patched by the website owner| 26 July, 2017 17:35 GMT