800+ IT
News
als RSS Feed abonnieren📚 Sifchain: wrong url in hackerone > goes to wix.com > unconnected
💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com
Summary: Hi there, this is a very small issue out of scope. Your current domain name in your hackerone program is wrong: http://sifchain.finance and moves to wix.com Steps To Reproduce: Login as a researcher Open the program from sifchain: https://hackerone.com/sifchain?type=team click on the public url: http://sifchain.finance you will be redirected to wix.com and see message "not connected" Supporting Material/References: screen movie: F1291486 Impact I think there is no impact. But maybe (Maybe - because i don't know how wix.com works): An attacker can create a new website and give his wix-project the name "sifchain.finance" or can connect an external domain "sifchain.finance". The attacker can create a copy/paste fake website. Than all researchers who click here on hackerone.com on the link will come to a fake website. The attacker maybe can steal sifchain login data from the... ...