Listen to this Post
How the CVE Works
The vulnerability exploits Astro’s trailing slash redirection logic when handling double slashes in URLs. When `trailingSlash` is configured, Astro sends a `301` redirect with a relative `Location` header (e.g., //target.domain/subpath/). Browsers interpret this as a protocol-relative URL, redirecting to `https://target.domain/subpath/`. Attackers craft URLs like `https://victim.com//malicious.com/` to trigger open redirection, enabling phishing or malware distribution.
DailyCVE Form
Platform: Astro
Version: >=5.2.0
Vulnerability: Open Redirection
Severity: Medium
Date: 2024-XX-XX
Prediction: Patch by 2024-06-30
What Undercode Say
curl -I "https://victim.com//malicious.com/" grep -r "trailingSlash" astro.config.mjs
How Exploit
- Craft URL: `https://victim.com//evil.com/login`
2. Send to victim.
- Browser redirects to `https://evil.com/login`.
Protection from this CVE
1. Upgrade to Astro 5.12.8.
2. Block `Location: //` headers.
Impact
Phishing, malware, credential theft.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
