🎯 New Report #3418031: Open Redirect in Rocket.Chat
🔺Severity: Medium
👽 Reporter: soohyun
⭐️ Reputation: 107
🛠 State: resolved
💼 Team: Rocket.Chat
💵 Bounty: null
🕐 Submitted: 2025-11-09
⏰ Disclosed: 2026-04-10 02:16:18
📝 Summary: An open redirect vulnerability was identified in Rocket.Chat. The / saml/sloRedirect/:provider endpoint included the redirect query string value directly in the Location header for a 302 redirect without any server-side validation. This issue was fixed in v8.4.0.
📂 Report JSON File: 3418031
@hackeronereports