Open redirection (stored)
Summary: PortSwigger describes stored open redirection as occurring when user-controllable input submitted in an earlier request is stored by the application and later incorporated into a redirection target, letting an attacker build a URL on the application's own domain that redirects to an arbitrary external domain. The write-up notes this is often more serious than reflected open redirection because the stored input can cause other users' browsers to redirect invisibly to a domain of the attacker's choice, and that an authentic application URL with a valid SSL certificate lends credibility to phishing.
Why it matters: The attack borrows your domain and your valid SSL certificate, so users who check the link see the correct host and still land on the attacker's site - and because the payload is stored, every user who views it is redirected without a further action from the attacker.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026