CVE-2023-34247

@keystone-6/auth Open Redirect vulnerability

Published Jun 13, 2023 CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Description

Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. To mitigate this issue, one may apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

keystonejs

keystone

affected

Version	Status	Constraints
`<= 7.0.0`	affected	—

Configuration 1 [-]

cpe:2.3:a:keystonejs:keystone:*:*:*:*:*:node.js:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2023-1834	Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, thereby it might be used by attackers to re-direct users to an unexpected location. To mitigate this issue, one may apply a patch from pull request 8626 or avoid using the `@keystone-6/auth` package.
Github GHSA	GHSA-jqxr-vjvv-899m	@keystone-6/auth Open Redirect vulnerability