Vulnerability · Published Jun 13, 2023 · Assigned by GitHub_M
CVE-2023-34247@keystone-6/auth Open Redirect vulnerability
Medium 6.1
In plain English
A medium-severity open redirect in keystone from keystonejs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. To mitigate this issue, one may apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | @keystone-6/auth | 7.0.0 | GHSA-jqxr-vjvv-899m |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| keystonejs | keystone | <= 7.0.0 |
Weakness: CWE-601 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
References
- https://github.com/keystonejs/keystone/security/advisories/GHSA-jqxr-vjvv-899m x_refsource_CONFIRM
- https://github.com/keystonejs/keystone/pull/8626 x_refsource_MISC