Open Redirect Vulnerability in Taiga Affects Multiple Users
CVE-2024-53556

6.1MEDIUM

Key Information:

Vendor

Taiga

Status
Taiga
Vendor
CVE Published:
25 November 2024

What is CVE-2024-53556?

An Open Redirect issue in Taiga v6.8.1 permits attackers to exploit users by redirecting them to arbitrary websites. This is achieved through a specially crafted URL appended to the login page's query parameter '/login?next=', potentially compromising user credentials and leading to phishing attacks. This vulnerability highlights the necessity for robust user input validation to prevent unauthorized redirects and enhance web application security.

References

https://drive.google.com/file/d/1CIr8oHSF4JaqOn51wIhyZyvs...
https://gist.githubusercontent.com/Tommywarren/b42479a048...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.