Facebook social network vulnerable to Open Redirect
Open Redirect on the Facebook social network, exploitable among users who are friends.
Antecedentes
Facebook is a social networking service (www.facebook.com) launched in February 2004 and operated by Facebook, Inc. In July 2011, it had more than 750 million active users.
Description
An open redirect is a vulnerability in which a parameter redirects the user to its value without any validation. It is used in phishing attacks to trick users into visiting malicious websites without realizing it. The vulnerability is only exploitable between users who are friends.
Business impact
The vulnerability allows phishing attacks.
Affected systems
The Facebook social network: www.facebook.com (main site), m.facebook.com and touch.facebook.com (mobile versions).
Solución
The manufacturer has not provided any solution.
Calendario de divulgación
References
The information contained within this advisory is supplied 'as-is' with no warranties or guarantees of fitness for use or otherwise. Internet Security Auditors accepts no responsibility for any damage caused by the use or misuse of this information.
Company based in Spain and Colombia, specializing in web application auditing, network security, penetration testing, and compliance implementation and assessment. Our clients include some of the largest finance, telecommunications, insurance, and ICT companies. A vendor-independent provider with in-depth experience since 2001. Our R&D efforts include vulnerability research, collaboration on open security projects, whitepapers, and participation in industry events.
Would you like us to review your product?
Contact usDo you need a security audit?
Tell us about your situation and our team will get in touch with you to provide guidance or schedule a technical call.
Request information
Our offices
Transversal 22 # 98-82, Porta 100 Building, Office 1003
110221 Bogotá (Colombia)