Open Bug Bounty ID: OBB-1146086
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:
      a. verified the vulnerability and confirmed its existence;
      b. notified the website operator about its existence.
Affected Website: |
wissensmanagement.seminus.de |
Open Bug Bounty Program: |
Create your bounty program now. It’s open and free. |
Vulnerable Application: |
Custom Code |
Vulnerability Type: |
Open Redirect / CWE-601 |
CVSSv3 Score: |
3.4 [CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N] |
Disclosure Standard: |
Coordinated Disclosure based on ISO 29147 guidelines |
Discovered and Reported by: |
myNickName |
Remediation Guide: |
OWASP Open Redirect Cheat Sheet |
Export Vulnerability Data: |
Bugzilla Vulnerability Data |
JIRA Vulnerability Data [ Configuration ] |
|
Mantis Vulnerability Data |
|
Splunk Vulnerability Data |
|
XML Vulnerability Data [ XSD ] |
|
Vulnerable URL:
![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABLCAIAAAAphcDFAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAc0UlEQVR4nO2df0wcx/XANwclx/nAGB9nDFcM1MWUUkwdRElEXNeyXEoQuhCSIEocx0EEIYoooimllCLbJQhjlDqUWpFdEatK/UdqIYQi5F5TRBClxCUXciYHpvTAxxnDgQFfyBnD7fePVea73Z2Z2/sJxu/zF7O8ffPmvdmd29nZN0+wLMsAAAAAgA+QbbYBAAAAwLYFxhgAAADAV8AYAwAAAPgKGGMAAAAAXwFjDAAAAOArYIwBAAAAfMWWGGPi4uI+++wzUhEAtgjQMwHAVTZ/jPn8888dDsfBgwexRQDYIkDPBAA3cDLGTE1NhYSEYP+1vLz81ltvkYrS6erqys3NJRVdtQrwHW6H2FX8HN+pqaldu3Y5FZPSM8Wa+Q3ZxH7rSex+/vOfBwcHv/fee/y/vdUWvnIp3Lt377XXXouIiIiOjv7lL3/58OFDirDYSEqsSS2Cu42nsFRMJpNSqZTyL4oknfT09OvXr5OKJOx2uxt1AZ7gdojdwJ/xNZlMYWFhTsUk9kyBZoHHNqvfuh07q9Uqk8n0ev36+jr/b9YbbREolEJubm5hYaHZbDYajZmZmTU1NRRhcaspsSa5yJ/dfluyyXNld+7cGR8fP3LkCLZI4cknn/SpYcDmstXiK71n0tlq7XKKzWZTKBQHDx4MCAjg/814oy0ChU756quvhoeH33333ejo6AMHDrS2tn7wwQce2gD4GkljzO9///u4uLjdu3e/8sory8vLDMMsLy/HxsbabLYnnnjivffe4xdbW1tDQkLOnTu3Z8+eXbt2vfrqq1999RVJc1dX1/Hjx7/xjW8Iis8///y5c+e4g5999tmTTz7J1cswzBtvvPHGG2/wn14/+eSTZ599NiQkJDo6+oUXXvjiiy9IBxmGefDgweuvvx4SErJv377f/va3Gxsb3LPw+fPn4+Lidu3a9dOf/hTVhdXDl9+xY8fLL7+8sLDwi1/8IiIiYvfu3a+99tqXX36Jzn366aeDg4MjIiJefPHFmZkZ5utHb2x1WHmGYe7cufPcc8+FhITExcWdP38ePezT20K3zVVXCCLOD6J7rqaYx5+dIJkknobiz4GQTELMzMz8+Mc/DgkJOXDgwPvvv0/xibijkqrmjr/11lsRERF79+69fPmyoFJ0Il2DRP9IvMTEscPaie17CwsL6MQ//OEPYiWc/o2NjV/96ld79uzZsWPHiy++uLCwIDAAK8BXzt00nDY8ODj49u3bO3bs4NROTExERUVJCbcYp8EinSKOmu8Ctz1wPsbYbDa9Xj8wMDA0NGSxWGpqahiG2blzp9FoVCqVdru9qKiIX3z++edtNtvQ0NCNGzdu3LgxPDzc3NxMUk56GZOTk6PT6biD3d3dDoejp6eHK+p0uh/96Ed8JTk5OSdPnpyenu7v78/MzJTL5aSDDMOcPn16dXV1ZGSkp6enr6/v4sWLXBtHRka4Nk5PT9fW1tKVcz7p7+/X6/UWiyUxMdFqtY6MjAwODppMJnT68PBwSUnJ7OyswWDQaDTl5eXIpdjqSPLl5eVBQUETExM6ne7KlSvINlJbpNjmqisEEXfqf8/NQ1CiQ4JkEqK8vDw0NHR0dPTDDz/kjzFYmxnJL2NsNpvRaDQYDB0dHZmZmU7lsRqk+Ef6JcbgYie2E9v3du/ejU4sLS0ldYDm5madTqfT6cbHx6OiokZHRwUGYAX4yrmbhksdY2xsrLq6uqWlhZEQbpKrPQyWQJsngYsQ4aE9Wwj6VJrJZGIYZmVlhSsODAzEx8ejf2Hfx3CnTE9Pc8evXbuWlpbG/T09PR0bG4tOsdlsSqVycXFRXLRYLAqFgpvwTU9Pr6qqKiws5JSHhoZOTEygqhcXFwMDAwVTw9iDHCqVymazcX/r9fr09HRBG/v7+1EbsXo4+aWlJSQvk8lWV1eRi/bv3y+ud2JiIjIyUuxSfnVY+fX1dblcPjk5ifyJJpRJbZFom0uuYAkT02642ql5/IpIJom7H3ILxSQOzqX8LkpxKSvqqKSqOVORGFYSXSMUDVL8Q7rESIhdyrdTAOp74hOxf6vV6uHhYUrtJAHBTUP6NWU2m+Pj469evcpSw015H+M0WFgjSV3O88CZRYgteUQJdDoIKZVK9IQYFRW1uLjo9BS5XP7Nb36T+zsxMXF6ehqdPjAwgMSuX7+enp6Onjf5xb179yYkJAwMDCQlJVkslvr6+oSEhI2NDZ1Od+zYscDA/zd7165d+fn5GRkZR48ejYqKSktL++EPf4g9yDDMvXv3rFZrbGwsd67D4eBU8duo0WhQG0l6lErlzp07kXxoaGhwcDBqo9Vq5f7+9NNP33zzzdHR0bW1NYfD4XA4xC7lV4eVn5ubczgccXFxyJ/cH5S2SLHNVVeQcMPVUszj4y2TEHNzcwzD8Lso3SeCjkpBqVRKEaNrkOIf0iUmvRaBnaS+6pTl5eXFxcWUlBS3BZBJ0jtGfn5+ZWXlyy+/zEgIN6VGD4Plhv2kwEVHR3vLkq2G8zHGiwQEBOzduxcV6auWs7OzdTrd5ORkTk7Ozp07U1NT+/r6dDpddna2QO1f/vKXf//73waDwWKxVFVVPfPMM++88w72oN1ul8lkN27cQKOUTCZbW1uj2CzWU11dLbG9Wq22uLj44sWLcrncbDZnZWV5Ud6NtnjxdD7ecrUXwZrk9CyszYxbq5YfOVztqwKcvrSX+FZfCnfu3BkZGfnnP/+JjpDCzc2FbGxsoNq5VQYuVbe2tsb/UesjxJNj8/Pzvq7UT9Afc+iPh1Lmyjo7O7EP8uvr6yqVCk0BCYosyw4MDKSnp+fm5n744Ycsy7a3t1dUVERGRlosFspqQr1er9FoKAeVSqXgsZ3SRqweujwqzs3NBQYG8s9FD+nY00ny3MSOyWTijvMndlxti6DoxulOF3F64mr+PAZ2ToYvs7KyIpPJ+HNo9Kjxjwjmyjo7OykuFfdMUtXYmRnsNSJRA8U/Ui4xkiViO0l9j3KiYK5Mr9dTaicJSJmGEhfX19f54RAgCLdare7v70fF9vb2rKwscY3YIxydnZ2HDh1iqV3O88Bt47ky99cuq1Qqu91+69YtbLGqqmpmZubmzZsNDQ05OTnorAcPHnB/DAwMREZGoikgQZFhmKefftpkMg0ODh49epRhmNzc3I6OjsjISP6TEMMwX3zxxU9+8pN//OMfCwsLt2/fbmtrS01NxR7k5IuKisrKym7evHnnzp1z586dOXOG0kaKHqdERESEh4f/8Y9/XF5evnXrVkNDg3vyAQEBOTk5lZWVU1NTnD/RKS61RYyrp/NDjOLoLVe7SkhISFpaWlVV1d27d2/dusUtRaGbhGwOCAjIysrid1F0rthmcc+kVC0gPDzcbrePjY2h9WmuaqBAusSwCC5PAa72VQGVlZUlJSWff/75zMzMz372s48//pjheZsk4DYBAQHccjIO+kVaX19/6tSpjz/+eGFh4a9//WtdXV1dXR1WLT9Yf/vb3y5fvrywsPDJJ5/U1NSUlJQwXooaQwhctAj3lG9F6EMQfXxuaGhQKBQdHR384vnz55VKZVNTk1qtDgsLO3HiBHr3xddWXV1dW1uLVAmKHIWFhfn5+aiYlpbGyfD1rK2tNTQ0JCQkBAUFqdXqoqKi2dlZ7EFO3m63V1ZWajQahUKRnZ09OTlJaSNWj/TfXH19fWlpaXK5PDIysqqqyulvVaw8y7Kzs7M5OTlKpTI2NrapqQkdd6kt4qKrp7P/G2KKizw0T8pzDMuyExMTR48eVSqVSUlJFy5ccClqZrP5+PHjSqUyISGhpaWF4lJsz8RWjf0hXFNTg64RvoAUDXT/YC8xCuhqxdpJ6ntSnmPW19fffPNNlUoll8u1Wq3VahVUIRYQKHGp3wqKlB7I0draGhsbGxQUlJycfO3aNbH9CBSswcHBzMxMpVK5f//+1tZWJEDqcj4N3KPOEyzLenfQmpqaSk5Ovn//Pl3swIEDV65c+cEPfoAtAiTGxsYOHz589+7dzTbkccGLPVPipeE3PYCfeTwD59d3/nzGxsYoRYCEXq+Pj4/fbCseI6BnAoAnbH7eZRKQ8B9x5syZy5cvz8/P/+tf/6qtrS0tLd1EY/wciG0T94cPHw4MDGg0Gt9VIf6Oj+Nx++EMbCk27TmGDiT853PkyJHKysqysrKYmJiKiopXX311syzxcyC2U9xLSkq6urouXbrkuyr0ej32OKQNBjYT+usaynLVpaWlxsZGUtFDzp49W15eTir6CClrc/2ph453HS4RrwSCsjocWx234pMPyhZhtVqLiopUKlVUVFRNTc3a2hpFeHJyMjc3NywsTK1WFxcXLy0tUYS3Jv7pWq6yNa2qrKyUy+Xcagv+3wL8bPymXLabi/tzZZyzSEUPcWNTmccN7zpcIn4OBKqOy2rFcfbsWfTR+IkTJxwOh16v/+ijj3p7e0+fPk0RzsnJSUxMNBqNg4ODVqu1rKyMIgw80iwsLFy4cGFwcLCoqIj/92bbtTmX7SZDH4Iogzzp+zLPsVgsYWFha2tr2KLveLSeY/z/49FbgZD4HIOqm52d5b6b40hKSuJWoNpsNplMxk8SlZCQQBIWf2ao0WhIwluWrfnEsAWton9zSpL0A1vQV75G0hjz9ttvx8bGhoeHFxUVcZf00tISGqU6Ojr4Re7jiebmZvEa8KGhIW7VeVRUVF5e3ujoKLbSixcvvvTSS9iizWYrKSlRqVQajaahoYHb2ogzEluj3W4/deqUUqmMiYmpr6/ny7e0tMTGxoaFhRUWFnKNIq1epyx+t1gs2dnZ3Jcr6DMLyip4iv1i/SQ7Bf5/5ZVXjh8/jk6vra09ceKEwKWUehsbG1UqVWRk5KVLl0gtEgSC7kCso/jfozQ2NvK/RxEHCNsNOIaGhlQqFTfOOf2ahy/MsmxSUlJbWxvLsqurq6WlpQUFBRRhMeLeSzGA7iLx8ba2NqdBFDeZ5EBKuLHdiRIFp05gyXcJkiVarba5uZkT0Ov1QUFBSL6kpKS6ulrijYKkn5/crK2tjX+nIrkUazzl7iG4aiT6SnDbJJ24zfBrbn+JKbgpE2UVFRUWi2V4eLinp6erq6u9vR0Zia2RlKqdlC7eZrPd+BqnKdMZctZ9kh6S/RTnO820/7vf/a6vrw+tHerq6srLyxPoofhNkN6c1CJBIFzNt+9qLn2GMC/X0dFRWFiINhyiIxDu7u6ura0NDg4ODQ3t7e0VvH53qtnVBPKUPiY+rtVqnQYRC9aBlHBjTaJEQaITsHcJkiX0nTuys7OluxqrX+KWBAiS8ZS7h5RNAcStoGyQsZ2hD0Em7+X2p6Tg5uf8pyT8X19fVyqVKFVRV1dXRkYGpUaWkKrdRE4Xj9VD+rlKyrpP0kOxn/Qcg7VT7P+MjIwPPvgAHRQ4me43fnpzyj4C/EBQHEhxlPRc+qyoG3DY7fawsDCUT4z+HCMQZlm2oqLi0KFDQ0ND169f12g0/F+gYmEBpF0eKM8xlD6GjSk9iNgaWZwD6eHGVk2KghQniDWjuwTJEvrOHdysppSNnEn6BY5yOldGusVR7h6UnRE4KL563ObK/Jfbn5KCm5/zn5Lwf25ubm1tjZ/lHq0LwtZIStXOkNPFu5QynZR1n6SHYj8Jkp0CtFptd3f3Cy+80N3dnZ2dLdgEl1Kv8n/Tm1NaJIiLRMOQWsaVXPri6jg6OztjYmK+//3vU+oiCT98+PDSpUuDg4Pf+973GIZpbm5ubW19/fXXSZr5eXDn5+fdSCBPchHpODaIAjMEVWAdSA+3uGpKFKQ7AXuXIFlC37kjIiKCVIvAHjcuKKxLscbT7x6CninW6faOA9sPv34fQ0rBzc/578UVZaRU7duPvLw87pm9u7v75MmTvqjCFyvKKAEiTZSdOnVKonKB8OLi4traGjfAMAyTmppqNpspmsXfmniyy4MUsEEkffLC4ZUeTlEixQlSNk0QQ9+5g1QL3RsSkajEJd9idXrLV4889Mccp281xZImaYnHsUn46Qn/Jc6V8WtUilK1UxpF0kPK6U3Kuk/SQ7Lf7Uzv/P8mJyfrdLqwsDCkh+9VKXN0lBYJAkEyjO4oibn0xdVxmM1muVw+NzeHjmDXlZGEWZaVy+UTExOoaWheBStMh+u9biR7p8eUEkSsWpawGYFLU7JYJVJAlzBljpQ0l0XZuYNUixhvzZW55Bb3JrtIvnoccH+MsdlsgYGB4+PjgiJ3h83PzzebzQaDITU1taGhgWXZ0dHRrKysjz76yGq1Tk9PFxcX5+TkIM3cxGVfX19ycjI6KCiyLFtcXJybmzs9PW0wGA4dOnThwgX263u6uEaWZUtLSzMyMrifEs3NzadPn6Y0iqInPT29uLh4dnZ2fHw8MzMTOSE/P1+r1ZpMJoPBkJKS4lQP1n6Sfvr9SOD/+vr6lJQUsUvpfhN3d2yLBIGgGEZylFar5TsEHccGSBx3lmWbmpq0Wq3gYFZWVlFRkcVi4aqrq6ujCJeXlx89enRycnJ4eDghIQEt7MEKCyD1XlJ73RtjxEEUsLKyEhgYaDQa0dIvrAOlhJtfNVaJdCdQNJM6PMuyarVarVZzvdRsNoeGhqamplJqwULS75UxRsrdgwSpFYLL9nHAf7n9KSm4US1OE/5TFmVi1wqLU7VTGmUir4Em5fTGZt2n6MHaT9LvdG0u3//c0zqKheBcKWumKS0SBIJiGMlR0nPpY+POsmxiYmJnZ6fg4NzcXGFhYXh4OPrOnyJst9vLy8vVanVMTExLSwtdswBS73U12Ts9poIgYuFvFsASHOjSEnmSEulOoP8SxXZ4lrxzh9Nc/XxI+r0yxki5e5CgtEJw29z2OBlj3MCTh8GEhITBwUFS0Rc1ehGj0ahWqzerdpvNJpfLnS53cQnUIomB8BZ+rm7r4IsgAsDmsrVyYj7SCf83N+v+9evXMzMzBctdPAS1yM+BeLTi7kV8EUQA2Fy21hjzyHHmzJmoqKjc3NzJycna2tr6+vpNMWN5ebmtra2goMBzVVukRY8hXgwiAGwdtudaXr9x5MiR9vZ2jUZTVFS0iVn30Ysfz1VtkRY9hngxiACwhfDPlJyvX5m4p7+3tzc1NVWhUGRkZIyMjEhRSKlI/E5ejN1uLygoEGugWEKqy2/mifPnkw661xa62V7HP3XxFyNUVlZyq6fEXwhmZWWJD3I5L7DCLG6HAn69KysrkZGRRqMRNRarHAD8hp+eY/bt28dPVLdFKCgoaGhoMJvNWVlZEj/u86QhDx48yMrKWl9f94olfjMPmz8fe9C7bfER/umKJ06ckMvlBoOhr69vZGSkrq6OO67kbSVgt9u7uroY8v4CWGHsDgWICxcuFBUVHThwAB0hKQcAP7HZg5x3cO/HqUqlMpvNLMt2d3enpKR4qNDpg4LJZDp79ixWM8USkir/mIf9zpHy8aMbbXGvOVsZbnkYSnU1NDS0f/9+lrxYHLu/AFYYu0MBKq6srCQnJ/O/33zkNi8Ath9ufh9jcjF1uXi5OjbHOCWxPP9c8acnJkKCbsqnKuzXn7yVlZWlpKQYDAZxRU7z/JNS1kt3qVNLWHJWeT+Yh+0AUj4kpHiVFD5OxmAwhIeH9/X1kdrOStiyQaFQvPTSS1artbq6WqVShYeHnzx5krvpS+yKQ0NDGRkZcrlcpVJxX48ieSl53fn09/cnJSVxpysUioqKCu7zw8rKSkEWfcHOBVhhyg4FjY2NlK8unG5eAAC+wP25MpdSl0s8l5JYnn8uNo0/KUE3SZ5hGC4RRUdHR09Pz3e/+11xRU7z/JNS1keIoDuTbgk21bk/zXMJp14lhYNhmOXl5by8vKampmeffZbSdkrSdb1e39/fr9frLRZLYmKi1WodGRkZHBw0mUwudcXh4eGSkpLZ2VmDwaDRaMrLy5G8IK+7U2eePXsWvclfXV1VKpUGg2FgYECn07399tt8ScH+Alhh0g4FX375ZWtr6+nTp6Ojo3/9619vbGwIzHBpWwQA8Br0IYiedkV66nLBj0esDCWxPN8AhpB+n8El6CbJsyx76dKllJSU2dnZI0eOcPMJExMT6CNKSkWoIZSU9WYRJJc6tYSUVd4/5rn6HOOhV7Ozs8vKypBmUoJ0StJ1/gyeTCZDj60DAwPiCStSVxQwMTERGRmJ5AXfSFKcybJsQ0PDsWPHuEcQu93O/7a0s7OTn0VfsL8ASZi0Q0FLS4tWq7VarRMTE8nJyfysLWLlAOA3PJorc+84ScZisQQFBaHjo6Oj2DFGLpfzZbj7F6VerDzLsmq1mrvkLBaLSqVqbGwcHBzkMiZJrMhisQhk3Jsro1vCsmxBQUFqampVVVVLS0tvb68/zXN1jPHEq7W1tTKZ7E9/+hPfHnHbudTrqq8JDw+n9wFBUUpXZFl2eHj42LFjUVFRXBXY7u2Uzs7O+Ph4q9WK/a/RaOSGLo6rV69SXl9xwmtrawqFAq3We//999FvpoSEBDR4d3V1CRLR0pUDgO94TL/BnJ+fX1xc5PYL2bt3b0dHh1arvXHjBmVXO5cQT5iIN/+QbonXs8pLN88lPPHq6urqtWvXrl69Wl5enpeXt3PnTu64uO3cUOTrLRu0Wm1xcfHFixflcjm3Ro4kSXLmzZs3S0tLe3p6du/eTTrX4XCgv53uXOBwOEg7FNy7d29ychLt0JOQkGCxWPjnurQtAgB4ESdjTHh4+Orq6v3797k9fPhbbngdtVotk8mmpqb27dvHMIzRaMSK2e3227dvc5fT+Ph4TEwMXS1WPjw8PDAw8NatW9/+9rcZhnnuuedOnTr17rvvGgwG6RWp1WqGYfgy6F/SN7qQYgnDME899dRTTz3FMAy3E211dbV/zFOpVKurq8vLy9xN32w2q9Vq7EGJbSGZLZPJrl279p3vfOfKlSt1dXX8nTYEbX/nnXcUCgUazHzB/Py8xWL5zW9+wxXpa52xzrx3755Wq21tbT148CA6+Pe//726uvrTTz/liqOjo2gLrJmZmd7eXv47SKzwnj17AgMD//Of/3zrW99iGMZoNHIaFAqFw+H473//y23YZTQa+f1BrBwA/IfTJx2X0s57MlfGEhLLs7w09SZC2nz6eyNsmv2ysrJnnnnGYDBYrdaOjg5upRBKDi+xIlLKegri+Ra6Jdgk4f40D5s/n5RU33OvGo1GuVzOTQeREqS7tGWDoCixK6rV6vb29qWlpfHxca1W69Jc2fr6+rFjxyoqKvhft7Asu7S0pFKp6uvrrVbr8PAw/62JeH8BkjBphwKtVst90TkyMpKUlMSfcpSyeQEA+AjnY4xLaec9HGMoqfL55zpdsyuol5T2v6amJjY2Vi6XHzp06M9//vPk5KRCoeBWzUpZZcuSU9ZTEN+n6JZgk4T70zxs/nxSUn0pXnUavoqKisOHD5Pazrq4ZYOgKLEr9vX1paWlyeXyyMjIqqoql8YYk+jreqSWmzlUKpXx8fHNzc3oFOz+Alhh0g4FVquVi0hMTExTUxNfj5TNCwDARzzBsqz/HppcYWxs7PDhw3fv3uUfnJqaSk5Ovn//vkQlrsoDPgXCAQCPG1s3J+bmpsoHAAAAPGdrrSuDxPIAAADbia31HAOJ5QEAALYTW/d9DAAAAPCos7WeYwAAAIDtBIwxAAAAgK+AMQYAAADwFTDGAAAAAL4CxhgAAADAV8AYAwAAAPgKGGMAAAAAXwFjDAAAAOArYIwBAAAAfAWMMQAAAICvgDEGAAAA8BUwxgAAAAC+AsYYAAAAwFfAGAMAAAD4ChhjAAAAAF8BYwwAAADgK2CMAQAAAHwFjDEAAACAr4AxBgAAAPAVMMYAAAAAvuL/AH44LoCF7zypAAAAAElFTkSuQmCC)
Mirror: Click here to view the mirror
Coordinated Disclosure Timeline
Vulnerability Reported: |
18 April, 2020 07:38 GMT |
Vulnerability Verified: |
18 April, 2020 07:54 GMT |
Website Operator Notified: |
18 April, 2020 07:54 GMT |
a. Using the ISO 29147 guidelines |
![](/images/done.png) |
— |
— |
b. Using publicly available security contacts |
![](/images/done.png) |
c. Using Open Bug Bounty notification framework |
![](/images/done.png) |
d. Using security contacts provided by the researcher |
![](/images/done.png) |
Public Report Published |
|
[without any technical details]: |
18 April, 2020 07:54 GMT |