Uncontrolled external site redirect
Description
Redirects made by the application are not controlled and could be manipulated by an attacker.
Impact
Redirect users to sites controlled by an attacker.
Recommendation
Use predefined parameters and not information that can be manipulated by the user for redirection to web sites in the application.
Threat
Anonymous attacker from the Internet.
Expected Remediation Time
⏱️ 30 minutes.