🎯 New Report #3423013: page.line.me Open Redirect Leading to OAuth Authorization Code Exposure and Access Token Compromise
🔺Severity: High
👽 Reporter: imnotr3al
⭐️ Reputation: 353
🛠 State: resolved
💼 Team: LY Corporation
💵 Bounty: 1000
🕐 Submitted: 2025-11-12
⏰ Disclosed: 2026-06-02 03:30:35
📝 Summary: An open redirect vulnerability was identified in page.line.me because redirect destinations were not properly restricted to trusted domains. This vulnerability could have been abused within an OAuth 2.0 authorization flow to cause the authorization response to be sent to an attacker-controlled endpoint, potentially exposing the authorization code issued after successful user authentication.
📂 Report JSON File: 3423013
@hackeronereports