(Apr 23, 2013 10:26 AM)Mr.Phoenix Wrote: Actually day before yesterday i have reported open redirection vulnerability to facebook.It works perfectly in all browsers.It wont prompt security measures.But the user must signed into their account Otherwise it wil give errors.We can trick the users to redirect to malicious sites while chatting by sending that url to them and also we can trick them to download our virus files via PM.I have included 14 different urls from different parameters with that.But till now i did not get any reply from them. Really i was disappointed.I am really feeling bad 😭
How many days i need to wait for their response? will they reply me? Is this an valid vulnerability. Hope you guys must have experience in this..
I need a good advice from you guys :(
If it's that App url redirection vuln, it has been reported dosens of times.
