Twitter Analytics suffers from an open redirection vulnerability that can assist in phishing attacks.
93c556fd4f7d94e62d7e1780b49f695ec9a5a00aee29605cc6cd06c7ffcf72ec
================================================================================Twitter Analytics Open Redirect Vulnerability
================================================================================
# Credit by Asheesh Anaconda
Description
An open redirect vulnerability exists in Twitter Analytics that could
lead to spoofing. To exploit the vulnerability, an attacker could send a
link that has a specially crafted URL and convince the user to click the
link.
Steps To Reproduce:
Replace the phishing url with any website
http://analytics.twitter.com/daa/0/daa_optout_actions?action_id=3&&rd=<phishing
url>
http://analytics.twitter.com/daa/0/daa_optout_actions?action_id=3&&rd=https://www.google.com