While doing reverse Ns lookup for Facebook.com, I came across this domain oversightboard.com. What is oversightboard? ================ The Oversight Board is a body that makes content moderation decisions on the social media platform Facebook.
Oversightboard have two login options, through facebook or instagram, while testing the login functionality I found that there is an open redirect bug in "redirect_url=" parameter without linkshim protection.
An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain.