Open redirection (DOM-based)
Summary: DOM-based open redirection occurs when a client-side script writes controllable data, such as data from the URL, into a redirection target in an unsafe way, letting an attacker construct a URL that redirects another user to an arbitrary external domain. PortSwigger notes this can support phishing because the authentic application URL, correct domain and valid SSL certificate lend credibility, and that controlling the start of the string passed to the redirection API may escalate the flaw into JavaScript injection via the javascript: pseudo-protocol.
What you should know: The redirect rides on your own domain and valid certificate, so users who check those features still land on an attacker's site, and the same flaw can escalate to arbitrary script execution in the browser.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026