Facebook patches URL redirection bug

By

Fast fix.

A Facebook URL redirection vulnerability discovered last week was patched just a day after a blog post detailing the bug went live.

Facebook patches URL redirection bug

According to the post by security researcher Dan Melamed, the vulnerability would allow anyone to have a facebook.com link redirect to a website of their choosing “without any restrictions,” simply by removing the “http://” tagged to the end of the URL.

Facebook contacted the researcher to notify him that any suspicious redirects would be caught by their internal Link Shim security tool.

However, Melamed, who included a video highlighting the flaw in his post, wrote that “not all malware/spam” could be caught by Facebook, adding that attackers could easily keep shifting to other malicious links.

The bug landed Melamed $1000.

This article originally appeared at scmagazineus.com

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Travel eSIMs secretly route traffic over Chinese and undisclosed networks: study

Travel eSIMs secretly route traffic over Chinese and undisclosed networks: study

Accenture to buy Australian cyber security firm CyberCX

Accenture to buy Australian cyber security firm CyberCX

TPG Telecom reveals iiNet order management system breached

TPG Telecom reveals iiNet order management system breached

"Shade BIOS" stealth malware hides below operating system

"Shade BIOS" stealth malware hides below operating system

Log In

  |  Forgot your password?