CVE-2022-31040 Open Redirect in open-forms
Attackers can redirect users to malicious sites via an unvalidated referer parameter in the cookie consent page, facilitating phishing attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-31040?
CVE-2022-31040 is a high-severity vulnerability in open-formulieren open-forms, published on 13 Jun 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contains an open redirect by injecting a `referer` querystring parameter and failing to validate the value. A malicious actor is able to redirect users to a website under their control, opening them up for phishing attacks. The redirect is initiated by the open forms backend which is a legimate page, making it less obvious to end users they are being redirected to a malicious website. Versions 1.0.9 and 1.1.1 contain patches for this issue. There are no known workarounds avaialble.
Weakness: CWE-601
Which versions are affected by CVE-2022-31040?
It affects 1 product.
Products include Maykinmedia Open Forms.
How do I fix CVE-2022-31040?
No fix has been published for CVE-2022-31040 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-31040 being exploited?
There is no known exploitation of CVE-2022-31040 in the wild and no public exploit code.
Other vulnerabilities in open-formulieren open-forms
- CVE-2024-24771 Open Forms potential multi-factor authentication bypass
- CVE-2022-31041 Insufficient content-type validation for uploaded files in open-forms
- CVE-2026-28803 Open Forms possible to view submission details of other people than intended
- CVE-2025-64515 Open Forms prefill data in read-only components can be tampered
Sources
Also known as GHSA-c97h-m5qf-j8mf.