VULNERABILITY DETAILS
An interstitial web page is one that is shown before expected content. Using one is a
common method to protect against open redirect vulnerabilities since any time you’re
redirecting a user to a URL, you can show an interstitial web page with a message
explaining to the user they are leaving the domain they are on. This way, if the redirect page shows a fake log in or tries to pretend to be the trusted domain, the user will know that they are being redirected. This is the approach most of browser like firefox takes when following most URLs off their site for example, when following links in submitted reports. Although interstitial web pages/window are used to avoid redirect vulnerabilities, complications in the way sites interact with one another can still lead to compromised links.

VERSION
Chrome Version:64.0.3282.119 (Official Build) (64-bit)


REPRODUCTION CASE
open chrome browser :

type any website eg: www.google.com@[any malicious domain]

eg:https://www.google.com@msn.com

it should let user know  where he is going & maintaining trust relationship through interstitial window or web page.

but it doesn't & redirect you to other domain.

if you open same url in Firefox it shows interstitial window to prevent user to unconscious redirection.

Attached POC video which demonstrate how we can perform phishing attack using this bug in chrome

Regards,

Vijay Tikudave


 

Deleted: Interstitial Redirect.mp4 4.4 MB

	Interstitial Redirect.mp4 4.4 MB View Download