An IDOR has been detected on firstpromoter service...
3.2AI score
SaveExploits0
Hacker One•added 2020/08/09 2:59 p.m.•19 views
Dropcontact: Host Header Injection.
Someone could change the redirection when login out from firstpromoter, by tweaking the logout request and using http X-Forwarded-Host, someone could redirect the logout toward a bad place...
