Skip to content
TORNLIFE More

Security Vulnerability: Reverse Tabnabbing

Started by Dunning-Kruger [9778] on in Bugs & Issues.

5 replies · 235 views · thread synced · 5 days ago · View on torn.com
About this thread

Posts archived: 6 / 6 posts (100%) · the total is Torn's reply count + the opening post at the last fetch

Counted by TornLife from the archived posts.

Archived posts
6
Discussion span
→
People posting
5
Likes on archived posts
14
Posts by staff, officers and moderators
3
Authority score
60 / 100
Historical score
35 / 100
Story score
44 / 100
Engagement score
56 / 100

Most-liked replies

  • Chedburn [1] Admin · 2 likes ·
    Thanks for the live example, very helpful! I'll pass this over to Viktor, perhaps there's a simple fix we can integrate into our text editors.
  • CloudJumper [1636201] · 1 likes ·
    Confirming the report for Joe. Thanks..!!
  • Xepa4ep [1720900] Admin · 1 likes ·
    Fixed, will be with next LIVE
Dunning-Kruger [9778] · #1 · edited
Hello,

Any outgoing link seems to be vulnerable to reverse tabnabbing, for example: user posted links in forums and chats. This allows the attacker to replace the opening tab by a malicious page.

Non-exploiting demo here. It replaces the opening tab with a crude look-a-like-site that could be used for phishing. Tested it in chrome.

Details about the vulnerability, and how to address it, can be found here.

Thank you!
Chedburn [1] Admin Developer · #3
Thanks for the live example, very helpful! I'll pass this over to Viktor, perhaps there's a simple fix we can integrate into our text editors.
Stiny [992186] · #4
Tested in Firefox and could not get it to work.
Reports say Firefox version 34+ are not vulnerable to this exploit.