Listen to this Post
How the CVE Works:
The vulnerability in DiracX-Web arises from improper validation of the `redirect` parameter in the login page. An attacker can craft a malicious URL with an external domain in the `redirect` field, which the server processes without sanitization. By leveraging parameter pollution (e.g., ?param1=value1&redirect=malicious.site), the attacker obscures the malicious redirect within a seemingly legitimate request. When a user authenticates, the server blindly redirects them to the attacker-controlled site, enabling phishing or credential theft.
DailyCVE Form:
Platform: DiracX-Web
Version: < 0.1.0-a8
Vulnerability: Open Redirect
Severity: Moderate
Date: Jul 17, 2025
Prediction: Patch expected by Jul 31, 2025
What Undercode Say:
Analytics:
curl -I "https://diracx-cert.app.cern.ch/auth?redirect=https://evil.com" grep -r "redirect=" /var/www/diracx-web/
How Exploit:
1. Craft URL with malicious `redirect` parameter.
- Trick user into clicking the link (e.g., phishing email).
3. Server redirects victim post-login.
Protection from this CVE:
- Update to v0.1.0-a8.
- Validate `redirect` against whitelisted domains.
- Sanitize query parameters.
Impact:
- Phishing attacks.
- Credential theft.
- User session hijacking.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
