Hello people,
The first bug I found was in Paytm which was a simple Open URL Redirect. It was specifically in their mobile version. The affected url was www.paytm.com/login?redirect=///////www.example.com.
As you can see the vulnerable parameter was redirect and I was able to bypass the protection in place by using multiple forward slash and was able to redirect the victim to www.example.com.
This vulnerability was reported to Paytm via their Bug Bounty program ( https://paytm.com/offer/bug-bounty/ ) and now that has been patched.
