Open Redirect

karma is susceptible to open redirect attacks. The attack exists because the return_url query parameter is not properly validated, allowing an attacker to inject a malicious URL through to the system.