Vulnerability · Published Sep 30, 2024 · Assigned by GitHub_M

CVE-2024-47530Scout contains an Open Redirect on Login via `next`

Medium 5.4

In plain English

A medium-severity open redirect in scout from Clinical-Genomics. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.4%top 66.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.

Affected products (as reported)

Vendor	Product	Versions
Clinical-Genomics	scout	< 4.89

Weakness: CWE-601 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

References

https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-3x45-2m34-x95v x_refsource_CONFIRM
https://github.com/Clinical-Genomics/scout/commit/50055edfca9a7183b248019af97e1fb0b0065a02 x_refsource_MISC