DON’T TRUST LINKS WITH KNOWN DOMAINS: BMW AFFECTED BY REDIRECT VULNERABILITY

Summary from the TLDR InfoSec newsletter

Cybernews researchers discovered two BMW subdomains that were vulnerable to a SAP redirect vulnerability. The vulnerability allows attackers to redirect users to a malicious website or inject arbitrary content into a legitimate website. BMW was immediately notified and the vulnerability was fixed.