twoo.com Open Redirect vulnerability

2016-06-06T19:02:00
ID OBB:158267
Type openbugbounty
Reporter dim0k
Modified 2017-11-24T11:14:00

Description

Vulnerable URL:
https://www.twoo.com/track/homepage_footer/click/20847830967?f=https://www.openbugbounty.org/?http://itunes.apple.com/app/twoo/id486773266?mt=8
Details:

Description| Value
---|---
Patched:| Yes, at 24.11.2017
Latest check for patch:| 24.11.2017 11:14 GMT
Vulnerability type:| Open Redirect
Vulnerability status:| Publicly disclosed
Alexa Rank| 719
VIP website status:| Yes
Check twoo.com SSL connection:| (Grade: A)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability submitted via Open Bug Bounty| 6 June, 2016 19:02 GMT
Notification sent to subscribers (without technical details)| 6 June, 2016 22:17 GMT
Vulnerability details disclosed by researcher| 29 August, 2016 19:12 GMT
Vulnerability patched by the website owner| 24 November, 2017 11:14 GMT