DOM-based open redirection
Summary: DOM-based open-redirection vulnerabilities arise when a script writes attacker-controllable data into a sink that can trigger cross-domain navigation, such as unsafe handling of the location.hash property. An attacker can construct a URL that redirects another user to an arbitrary external domain, and if the attacker controls the start of the string passed to the redirection API, the flaw may escalate to JavaScript injection via the javascript: pseudo-protocol.
Key Takeaway: The redirect rides on an authentic application URL with a valid TLS certificate, so users who check those features still won't notice the subsequent jump to a different domain - which is exactly what makes it useful for phishing against your users.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026