Mlmym bug that allows for 302 redirect hijacking - Now fixed in v0.0.40
Mlmym bug that allows for 302 redirect hijacking - Now fixed in v0.0.40
github.com
/link endpoint allows redirection to any arbitrary URL · Issue #101 · rystaf/mlmym
Heads up for anyone running mlmym on their instance, your site is probably being used for google SEO manipulation: https://github.com/rystaf/mlmym/issues/101
If you're running an old version, update to v0.0.40!
Cheers, I just started dropping connections to
/linkas well, as a result.Edit: Looks like it was quickly fixed and released in 0.0.40, very cool.