GHSA-vp8p-c6xj-xpj7 Silverstripe External redirection risk in Security?ReturnURL
An open redirect in SilverStripe allows attackers to redirect users to malicious sites after login, potentially leading to credential theft.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is GHSA-vp8p-c6xj-xpj7?
GHSA-vp8p-c6xj-xpj7 is a vulnerability in silverstripe/framework, published on 23 May 2024. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability has been found in the SilverStripe framework where a login url can be potentially redirected to an external site.
For example, the url http://www.my-silverstripe-site.com/Security/login?BackURL=/\attacker-site.com will redirect successful logins to the page http://attacker-site.com. If that website were set up to look identical to the first with "login failed" then the user will likely just enter their user/pass again.
Which versions are affected by GHSA-vp8p-c6xj-xpj7?
4 open source packages ship an affected version, including silverstripe/framework.
| Package | Affected | Fixed in |
|---|---|---|
silverstripe/framework Packagist | All versions | 3.0.14 |
silverstripe/framework Packagist | All versions | 3.0.14 |
silverstripe/framework Packagist | From 3.1.0 | 3.1.13 |
silverstripe/framework Packagist | From 3.1.0 | 3.1.13 |
How do I fix GHSA-vp8p-c6xj-xpj7?
Upgrade silverstripe/framework to a fixed version for your release line: 3.0.14 or 3.1.13.
Is GHSA-vp8p-c6xj-xpj7 being exploited?
There is no known exploitation of GHSA-vp8p-c6xj-xpj7 in the wild and no public exploit code.